Running reports to view effective rights

There are built-in Infrastructure reports that you can customize to view effective user rights based on the criteria in which you are interested. For example, you can generate a report of the permissions assigned to a user or role for a specified account, database, domain, secret, service, or system. Similarly, you can generate a report that lists all of the permissions associated with Privileged Access Service objects for a specific user or role. You can then export to a file with comma‑separated values or email the report to others.

To create a report of effective rights for Privileged Access Services:

  1. In the Admin Portal, click Reports.
  2. Click Builtin Reports, then click Infrastructure and Effective Rights to display the types of reports available.

    • For Role reports list the effective rights for a selected role on different types of Privileged Access Service objects or all Privileged Access Service objects.

    • For User reports list the effective rights for a selected user on different types of Privileged Access Service objects or all Privileged Access Service objects.

    • Role to Object reports list the effective rights for a selected role on different types of Privileged Access Service objects.

    • User to Object reports list the effective rights for a selected user on different types of Privileged Access Service objects.

  3. Select the type of report, then select the type of Privileged Access Service object for which you want information.

    For example, to see a complete list of the permissions granted on all Privileged Access Service objects for the members of the IT-Admin1 role, you would:

    • Select For Role as the report type.

    • Select All Infrastructure Objects as the report to run

    • Search for and select IT‑Admin1 as the role for which you want the complete list of permissions.

    • Click Select.

    The results are displayed in a table similar to the following.

  4. Click Actions to copy the report, see or customize the report Details, Export the report to a file with comma-separated values, or Email the report to someone else or to a distribution list.

    For more information about working with reports, see Managing reports.