An administrator with access permissions to manage users and groups in Micetro can check the effective access of a user or group based on the role(s) they have been assigned. Checking effective access can be useful when troubleshooting access issues.
To check a user or group's effective access:
- Navigate to and select either Users or Groups in the left sidebar.
- Select the user/group in the data grid, and then use either the Action or Row ... menu to select View effective access.
The View effective access dialog displays two tabs:
- Micetro access
- Displays all enabled permissions for the user/group. Use this tab to
understand which modules, clients, and administrative tasks are accessible to
the user/group.
- Object access
- Displays all objects to which the user/group has access. Use this tab to check access configuration for individual objects in the system, e.g., servers, zones, or IP ranges.
- Use the Type dropdown to select an object type, e.g., Zone, and use the
search bar to search for a specific object to check whether the user/group is
allowed access and to inspect where the permission was set.Tip: To inspect the role(s) where the permission was set, select the i icon in the Permission list.
Note: The View effective access dialog displays detailed
warnings if permissions to the selected object are set but a parent permission is
not.
Example: Examining effective access on a DNS zone might reveal that the user is assigned to a role with permission to view DNS zones, but not to use the DNS module.