Documentation forAccess Rights Manager

Remove multiple access paths to file server directories

Background / Value

Multiple access rights often occur through nested AD group memberships. They are often a symptom of a confusing group and AD structure. Access rights to a particular resource should only be achieved through one group membership. Access Rights Manager allows you to remove multiple access paths quickly and easily.

 

Step-by-step process

  1. You have identified "Emily Employee" as having multiple access paths.
  2. Right-click on the account and select "Show in account view" from the context menu.

 

Use the AD graph to analyze multiple access paths.

 

Right-click on the account and select "Change group memberships" from the context menu.

 

  1. Remove the unnecessary group membership.
  2. You must enter a comment.
  3. Start the process.

 

E017-05 EN Mehrfachberechtigungen auf Verzeichnissen entfernen

  1. After removing all unnecessary group memberships you still need to remove the direct permissions.
  2. Right-click on the desired directory.
  3. Select "Modify access rights" from the context menu.

 

  1. Right-click on the desired user.
  2. Select "Remove" from the context menu.
  3. Start the removal process.

 

Verify the result in the resource view.