Introduction to ARM

Discover Access Rights Manager (ARM), a SolarWinds tool that allows you to manage user access rights to systems, data, and files in your corporate network.

Download the PDF: ARM Product Guide (formerly known as Administrator Guide)

Configuration

You can configure your ARM deployment in a variety of ways to best meet your needs. Before using ARM, run the Configuration Wizard to collect information required for the base configuration.

Creating a basic ARM configuration sets up the primary database connection needed to store and manage data. As ARM requires an SQL database for data storage, you will need to specify the SQL Server name, instance, and authentication method and credentials.

Using the Configuration application, you can transfer a license to another server, assign licenses to AD objects, and identify logged in users. If you are currently using an evaluation version of ARM, you can alsou utilize the Configuration application to switch to a production license. To access information about your ARM license and the server status, see License and server status.

With user management, you can add new users, define user roles, and assign new roles to each ARM user. For more information, see User management.

A data owner manages user access to data resources and allows you to create organizational categories. Data owner approvals can be activated or deactivated and configurations can be exported to another system. To designate a data owner, see Data owner.

Change configuration allows you to modify common change settings for supported technologies. With this configuration, you can modify AD, Azure Active Directory (AAD), Microsoft Exchange, File Serve (FS), OneDrive, SharePoint, and Teams. To begin configuring your change settings, see Change configuration.

Utilizing the server configuration allows you to manage comments, emails, data, storage, health check, and event logs settings. See Server to view and modify these settings

With scans configuration, you can modify the scan intervals of access rights structures in your network and utilize the results to troubleshoot and resolve access issues in your organization. Modify your ARM scans with Configure resources and monitoring.

ARM collectors gather resources and data from Logga scans and transfer the data to the ARM Server for processing. You can run these collectors on foreign domains and update or remove them as needed. To install collectors, see Collectors.

Alerts can be modified, activated, or deactivated as needed. Alerts can be created for groups, users, domains, or file servers using active alert sensors.

With a script, you can execute change actions and automate the steps that precede or follow an action. To configure your scripts, review the steps outlined in Scripting.

The Jobs Overview in the Configuration applications stores information about scan speeds and data collection. To view job details, see Jobs overview.

Views & Reports can be utilized to modify the location of your reports and how many reports are stored there. You can also configure access restrictions and a blacklist to meet regulations and guidelines for your organization.

By configuring Open Order, you can use GrantMA workflows for orders not executed with ARM once complete. These technologies can then be defined in an XML file for systems not integrated in ARM.

With ARM, you can customize templates for creating users, groups, contacts, and open orders. This customization standardizes and simplifies object creation.

Use Cases

The ARM use cases offer a step-by-step guide through common ARM uses within your organization.

By utilizing the use cases, you will become familiar with identifying access rights, locating user and group access, verifying account details, and visualizing network group structures. For a detailed walkthrough, see Use cases to start with.

Using ARM

ARM analyzes user access and authorization to resources in your organization. This standardization allows you to monitor, identify and, troubleshoot security issues as soon as possible. To view and adjust user access, see Permission analysis.

With ARM, you can create and customize reports about user permissions in your organization. ARM also documents changes in AD, file servers, and integrated resources which you can view at any given time. See Documentation & Reporting for a further breakdown of how to customize your ARM reports.

Using ARM Logga modules, you can track and record security-relevant activities and user actions performed in your network. This information allows you to optimize alerts and generate a timeline of events. Read through Security Monitoring for more information about ARM Logga modules and security practices.

You can utilize Role & Process Optimization in ARM to map your company's organization chart and delegate tasks and access rights to individual staff members. Employees can also use the ARM GrantMA to request access rights through a simple workflow.

With User Provisioning, the set up of new users is fast and standardized. Activation can be scheduled and participants work with an effective and simple interface