Understanding the differences between views

There are many views that are very similar to each other but provide different levels of details related to role assignments and so forth. This section briefly covers the differences between views so that you can decide which view to use, based on your needs.

When choosing which view to use, keep in mind that a view that provides less detail results in a faster query response time.

What is included in a view

Which views you can use

A list of who can log in to which computers

EffectiveAuthorizedUsers_Computer (Including computers in classic and hierarchical zones)

EffectiveAuthorizedUsers_Computer_Classic (Only computers in classic zones)

EffectiveAuthorizedUsers_Computer_Hierarchical (Only computers in hierarchical zones

A list of who can log in to which computer and what privileges are granted to these users

EffectiveLoginUserPrivileges_Computer

EffectiveAuthorizedUserPrivileges_Computer
(Same as EffectiveLoginUserPrivileges_Computer, just to consist the naming as the other views)

A list of Active Directory users' effective role assignments

EffectiveRoleAssignment
(Both hierarchical & classic zones)

EffectiveRoleAssignment_Classic
(Classic zones only)

EffectiveRoleAssignment_Hierarchical
(Hierarchical zones only)

A list of the Active Directory users' effective privileges at the computer level

(The Active Directory users list in the view may not have the access right to the computer)

EffectiveRolePrivileges_Computer

 

A list of the Active Directory users' effective system rights at the computer level

(The Active Directory users list in the view might not have the access right to the computer)

EffectiveSysRights

 

A list of the authorized users’ privileges

The list indicates if a role or right supports its accessibility to the computer

EffectiveUserPrivileges_Computer

A list of the Active Directory users' privileges at the computer role level

EffectiveUserPrivileges_ComputerRole_Unix
(Assuming all computers managed by the Computer Role are UNIX)

EffectiveUserPrivileges_ComputerRole_
Windows
(Assuming all computers managed by the Computer Role are Windows)

A list of the Active Directory users' privileges at the Zone level

EffectiveUserPrivileges_Zone_Unix
(Assuming all computers managed by the Zone are UNIX)

EffectiveUserPrivileges_Zone_Windows
(Assuming all computers managed by the Zone are UNIX)

Local users

EffectiveAuthorizedLocalUsers_Computer
(A local users' version to the EffectiveAuthorizedUsers_Computer)

EffectiveAuthorizedLocalUserPrivileges_Computer
(A Local users' version to the EffectiveLoginUserPrivileges_Computer)

EffectiveLocalUsersRoleAssignment
(A Local users' version to the EffectiveRoleAssignment)