Running reports to view effective rights
There are built-in Infrastructure reports that you can customize to view effective user rights based on the criteria in which you are interested. For example, you can generate a report of the permissions assigned to a user or role for a specified account, database, domain, secret, service, or system. Similarly, you can generate a report that lists all of the permissions associated with Privileged Access Service objects for a specific user or role. You can then export to a file with comma‑separated values or email the report to others.
To create a report of effective rights for Privileged Access Services:
- In the Admin Portal, click Reports.
- Click Builtin Reports, then click Infrastructure and Effective Rights to display the types of reports available.
For Role reports list the effective rights for a selected role on different types of Privileged Access Service objects or all Privileged Access Service objects.
For User reports list the effective rights for a selected user on different types of Privileged Access Service objects or all Privileged Access Service objects.
Role to Object reports list the effective rights for a selected role on different types of Privileged Access Service objects.
User to Object reports list the effective rights for a selected user on different types of Privileged Access Service objects.
-
Select the type of report, then select the type of Privileged Access Service object for which you want information.
For example, to see a complete list of the permissions granted on all Privileged Access Service objects for the members of the IT-Admin1 role, you would:
-
Select For Role as the report type.
-
Select All Infrastructure Objects as the report to run
-
Search for and select IT‑Admin1 as the role for which you want the complete list of permissions.
-
Click Select.
The results are displayed in a table similar to the following.
-
-
Click Actions to copy the report, see or customize the report Details, Export the report to a file with comma-separated values, or Email the report to someone else or to a distribution list.
For more information about working with reports, see Managing reports.