Report on the usage of "everyone"

If the Everyone account is used for the assignment of access rights, (almost) everyone has access to the connected resources. The consequence is an excessive assignment of access rights and a high probability for unauthorized access.

The All Everyone permissions report lists all access rights for the Everyone account. These go against the principle of least privilege and should not be used.

You can remove Everyone Permissions in bulk in the ARM Web Client. Before you remove the permissions, assign specific group permissions to the corresponding resources.

Create the report

1. Log in to the Access Rights Manager application.

2. Click Start in the toolbar.

3. Under Documentation & Reporting, click All "Everyone" permissions.

   

4. Configure the report settings.

   

   1. In the Title and Comment fields, enter a title and comment for the report.

   2. In the Objects box, define the report range.

   3. Maximize the Settings menu and define the desired reports.

   4. Click Start to generate the report.

View the report

Below is an example of the All Everyone permissions report. In this example, the report lists the directories that everyone can access.

See the following sections for more information:

• Authenticated Users

• Identify globally accessible directories (web client)

• Remove "everyone" permissions in bulk (web client)