Documentation forAccess Rights Manager

Organizational help for administrators

In addition to automated documentation and reports, ARM includes several additional documentation features. These features allow you to manually add post-its notes to objects or provide Active Directory groups aliases using the purpose groups feature.

Add notes to user accounts and groups

Flag user and group accounts with post-its notes. This allows you to add tasks directly to individual objects.

  1. Log in to the Access Rights Manager application.

  2. Click Accounts in the toolbar.

  3. In the Graph center pane, right-click an account and select Add note.

    For example, Emily Employee.

  4. In the Add new note window, enter a note and then click Add.

  5. Click Start in the toolbar.

  6. In the Start screen, click Notes.

    The note displays in the Start - Notes screen. This screen includes all notes. Right click on a note to display the available note functions.

Purpose Groups: Give aliases to groups

Purpose groups add clear descriptions to Active Directory groups. These groups often include technical names, which makes it difficult for users or administrators to identify the purpose of an Active Directory group. Adding aliases makes the picture much clearer.

The alias descriptions are only visible in the ARM views and reports. There are no changes to Active Directory attributes.

Create a purpose group

  1. Log in to the Access Rights Manager application.

  2. Click Accounts in the toolbar.

  3. In the Graph center pane, right-click a group and select Create Purpose Group.

  4. In the Create Purpose Group pop-up window, enter a alias name and group description, and then click Create.

Delete or modify a purpose group

  1. Log in to the Access Rights Manager application.

  2. Click Resources on the toolbar.

  3. Under Resources, expand Purpose Groups > Management and select Delete Purpose Group or "Modify Purpose Group.

    The removal process only impacts the purpose group, which is he added alias in ARM. No changes are made to Active Directory.