Running reports to view effective rights

There are built-in Infrastructure reports that you can customize to view effective user rights based on the criteria in which you are interested. For example, you can generate a report of the permissions assigned to a user or role for a specified account, database, domain, secret, service, or system. Similarly, you can generate a report that lists all of the permissions associated with Privileged Access Service objects for a specific user or role. You can then export to a file with comma‑separated values or email the report to others.

To create a report of effective rights for Privileged Access Services:

  1. In the Admin Portal, click Reports.
  2. Click Effective Rights to display the types of reports available.

    • For Role reports list the effective rights for a selected role on different types of Privileged Access Service objects or all Privileged Access Service objects.

    • For User reports list the effective rights for a selected user on different types of Privileged Access Service objects or all Privileged Access Service objects.

    • Role to Object reports list the effective rights for a selected role on different types of Privileged Access Service objects.

    • User to Object reports list the effective rights for a selected user on different types of Privileged Access Service objects.

  3. Select the type of report, then select the type of Privileged Access Service object for which you want information.

    For example, to see a complete list of the permissions granted on all Privileged Access Service objects for the members of the IT-Admin1 role, you would:

    • Select For Role as the report type.

    • Select Audit Admin as the role for which you want the complete list of permissions.

    • Click Select.

    The results are displayed in a results table.

  4. Click Actions to:

    • Run the report again
    • Add the report to a set
    • See or customize the report details
    • Email the report to someone else or to a distribution list.
    • Export the report to a file with comma-separated values
    • Copy the report

    For more information about working with reports, see Managing reports.