Example of Permissions
You can define the permissions for a user on the Editing User page by selecting the checkbox next to each required permission on the Administrative Permissions tab. If the user belongs to multiple user groups, they will inherit all the permissions defined for them.
NOTE: If an Active Directory user is added as an independent internal user as well as to a Windows domain user group, the permissions granted to this Active Directory user will be prioritized over the permissions granted to this user within the domain user group.
For example:
There is a user Joe, who belongs to Group 1 and Group 2 user groups.
There are also Client 1 and Client 2, that belong to the All Clients group.
The following permissions are granted to the user Joe, Group 1, and Group 2 by the administrator:
User / User Group | Administrative Permissions | Client Permissions | |
Permission | For | ||
Group 1 | User Management | Client Uninstallation | Client 1 |
Group 2 | Database Management | Viewing Monitoring Results | Client 2 |
User Joe | Client Installation and Management, Database Management | Viewing Monitoring Results | Client 1 |
Client Configuration Management | All Clients | ||
As a result, the user Joe will have the following permissions:
• Administrative permissions:
- User Management permission (because they belong to Group 1).
- Management Tool Access permission (because they belong to Group 1 and Group 2, but they also have their own Management Tool Access permission, and therefore they will have it even if Group 1 or Group 2 is deleted or their permissions are edited).
- Database Management permission (because they belong to Group 2, but they also have their own Database Management permission, and therefore they will have it even if Group 2 is deleted or its permissions are edited).
- Client Installation and Management permission (they will have this permission irrespective of the user groups they will be added to).
.png?inst-v=362ca448-a20b-4783-93c2-f49186888f5c)
• Client permissions for Client 1:
- Client Uninstallation permission (because they belong to Group 1).
- Viewing Monitoring Results permission (because it is their own permission, and they will have it irrespective of the user groups they will be added to).
- Client Configuration Management permission (because the Client belongs to the All Clients group).
• Client permissions for Client 2:
- Viewing Monitoring Results permission (because they belong to Group 2).
- Client Configuration Management permission (because the Client belongs to the All Clients group).