Documentation forAccess Rights Manager

Assign the administration of access rights to a data owner

One of the most important processes in improving resource security in your organization is the delegation of access rights to managers and team leads. As an administrator, in close coordination with management, you can nominate data owners and assign resources. This process allows management to decide who has access to network resources be involved in the process of access rights assignment.

The following graphic provides a typical configuration of how to decentralize security expertise and transfer the directory management responsibility to the data owners.

organigramm

 

Define data owners and assign resources

Data owners and managers are responsible for protecting the digital resources in their departments. ARM allows you to delegate this individual responsibility effectively. These settings can be found in the ARM Configuration application.

  1. Log in to the ARM Configuration application.

  2. Click Data Owner.

  3. Set up the data owner configuration.

    1. In the left column under Organizational Categories, click Create.

    2. Create an organizational category.

      For example. Marketing.

    3. Select the new category.

    4. In the right column under User & Group selection, use the search field to find the desired account.

    5. Drag and drop the selected account to the Data Owner column.

    6. In the User role column, select the targeted role.

    7. In the bottom left column under Resource selection, drag and drop a resource into the Resources column. You can also search for resources.

    8. Click to mark the resources as Requestable in GrantMA.

    9. Click to mark the resource as Visible.

    10. Click to mark the resources as Changeable.

Enable data owners to manage permissions

ARM allows you to delegate different roles and responsibilities relating to user management. SolarWinds recommends starting with a simple definition of a data owner. This data owner is able to see and change the access rights to file servers for their employees and areas of responsibility. These settings can be found in the ARM Configuration application.

For more information, see the following sections: