Identify access rights on a resource

Using ARM, you can view all access rights on your resources. To begin, focus on the resources containing the most sensitive data. The primary goal is to figure out who can access your network resources.

1. Log in to the Access Rights Manager application.

2. In the toolbar, click Start (if not selected).

3. In the Start - Home screen, search for the targeted directory.

   1. In the Search field, enter a search term. For example, Marketing.

   2. Under Directories, select Marketing.

      

      ARM displays the Resources view, highlighting your selected option (for example, Marketing) in the toolbar.

      ARM opens the Resources view. Under Resources, ARM expands the File server tree and focuses on the target directory.

      

      In the Access rights tab located in the right column, ARM displays all access rights categories that exist for the Marketing directory.

      

4. In the Access rights tab, select an access category filter—for example, Modify. You can expand the tree to analyze how permissions are built.

   

   ARM lists all accounts with Modify access rights to the Marketing directory in a flat list, regardless of whether they are assigned directly, through groups, or nested groups. You can add additional filters for users, groups, contacts, and computers to narrow your results.