Permissions Constraints Details

With this release, administrators have access to a new Permissions Constraints Details page to review a user’s current security profile (roles, permissions, constraints) along with a historical audit of permissions, including when roles, permissions, and constraints were added and removed. These new tools aid administrators in ensuring that a user has appropriate access to the system.

How Does this Enhancement Benefit My Organization?

This enhancement provides the ability to evaluate a user’s current and historical security profile in detail.

Implementation

This functionality is automatically enabled for all organizations.

Upon release, the new User Permission and Constraint Details - View permission is automatically granted to the default System Administrator role. Administrators must grant this permission with the appropriate constraints to other roles, if necessary.

Permissions

The following new permission applies to this functionality:

PERMISSION NAME

PERMISSION DESCRIPTION

CATEGORY

User Permission and Constraint Details - View

Grants ability to access the Permissions Constraints Details page for a user. This permission also grants ability to see the Permissions Constraints Details link on the Permissions page. This permission can be constrained by OU, User's OU, User, and User Self and Subordinates. This is an administrator permission.

Core Administration

The following existing permissions apply to this functionality:

PERMISSION NAME

PERMISSION DESCRIPTION

CATEGORY

Users - View

Grants ability to search for and view summary information about users in the portal via the Admin/Users screen. This permission can be constrained by OU, User's OU, User Self and Subordinates, and Users. If multiple constraints are added, these constraints are considered OR statements. This is an administrator permission.

Core Administration

Security Administration - Manage

Grants ability to create, modify and constrain security roles within the portal, and assign users to those security roles. This permission can be constrained by OU, User's OU, User, and User Self and Subordinates. This is an administrator permission.

Core Administration