Identify deviating access rights in the tree structure

Inheriting permissions allows you to retain the access rights structure clear and manageable. ARM identifies deviating access rights, regardless of whether they were added or removed. If the chain of inheritance is broken, ARM displays this issue in the tree structure. You can make corrections or leave them as is, especially if the directory has special protection requirements.

1. Log in to the Access Rights Manager application.

2. In the toolbar, click Resources.

   

In the Resources screen, the green arrow indicates that some sub-directories contain divergent access rights.

The green circle (1) with the exclamation mark indicates that the directory access rights differ from its parent directory. The directories with divergent access rights (2) are listed in a window below with a drill down option.

When you select a subdirectory (1), the Resources screen displays the compared directories (2). The screen displays all access rights equal to the parent directory (3) and displays all deviating access rights (4). A plus (+) signifies added access rights while a minus ( - ) signifies removed access rights.

See the following sections for additional information:

• Report: Who has access where?

• Where do users and groups have access?

• Identify corrupted inheritance