Reporting on Permissions

Reporting on Permissions

You can choose to run a Summary or a Permissions report on a selected account, computer, permissioned through account, or resources. As you drill-down from an account to computers to permissioned through accounts, and finally to resources, you can run a report at each level. The further down you drill, the more specific the information in the report.

report name

description

Explicit Permissions
(run at the Account level)

Shows all explicit permissions granted to the selected account either explicitly or through nested group membership on the managed computers.

Access Explorer searches the database for each managed computer. This report lists the account, each listed managed computer, permissioned through accounts, resources, and the permissions granted to each resource.

Running a report at this level can take a long time. Unless you need this information, you should consider drilling-down to a lower level and running the report.

Explicit Permissions
(run at the Computer level)

Shows all explicit permissions granted to the selected account either explicitly or through nested group membership on the selected managed computer.

Access Explorer searches the database for only the selected computer. This report lists the account, computer, permissioned through account, resource, and the permissions granted to each resource.

Running a report at this level can take a long time. Unless you need this information, you should consider drilling-down to a lower level and running the report.

Explicit Permissions
(run at the Permissioned Account level)

Shows all explicit permissions granted to the selected permissioned through account either explicitly or through nested group membership on the managed computers.

Access Explorer searches the database for only the selected permissioned through account. If you select All Accounts, Access Explorer searches the database for each listed permissioned through account. This report lists the account, computer, permissioned through account, resource, and the permissions granted to each resource.

Explicit Permissions
(run at the Resource level)

Shows all explicit permissions granted to the selected account either explicitly or through nested group membership on the managed computers.

When you drill down to the Resource level, Access Explorer pulls resources for the selected Permissioned Account. The amount of data returned can be very large, so it is recommended that you apply a filter before running the Permissions Report. The report returns the data that displays.

This report lists the account, computer, permissioned through account, resource, and the permissions granted to each resource. The applied filter prints on the cover page.

Explicit Access Summary for Accounts

Shows a summary of explicit permissions granted to accounts, including permissions derived through group membership. The report is based on the indexed file permission data collected by Access Explorer.

This reports lists the account (including the number of resources with permissions), computer (including total number of resources with permissions), and then the number of resources (files, folders, and shares).

Explicit Access Summary for Computers

Shows a summary of explicit permissions granted to accounts on computers, including permissions derived through group membership. The report is based on the indexed file permission data collected by Access Explorer.

This report lists the account, computer (including total number of resources), permissioned through account, and then the number of resources (files, folders, and shares).

At the Accounts level, any report you run on an account causes the Explore service to pull in data from every managed computer on which that account has explicit permissions. The report generation could take a large amount of resources and time to complete. Drilling down to another level to run a report reduces the amount of data pulled by the Explore service.

If the report you choose returns a large amount of data, you see a warning message advising you to drill-down to a lower level or specific computer. You can choose to continue with the report or cancel.

If there is more than one permissioned account, you can choose All Accounts to run reports on all of the accounts listed.

To run a report

•

Select an account, computer, permissioned account, or file/folder/share, click Run Reports, and choose the type of report to run.

– OR –

•

Right-click an account, computer, permissioned account, or file/folder/share, and choose the type of report to run.

While the report is generating, you can return to the Report Manager and continue working. A progress dialog box displays the report generation progress. If the report generation is taking too long, click the Cancel button.

report name	description
Explicit Permissions (run at the Account level)	Shows all explicit permissions granted to the selected account either explicitly or through nested group membership on the managed computers. Access Explorer searches the database for each managed computer. This report lists the account, each listed managed computer, permissioned through accounts, resources, and the permissions granted to each resource. Running a report at this level can take a long time. Unless you need this information, you should consider drilling-down to a lower level and running the report.
Explicit Permissions (run at the Computer level)	Shows all explicit permissions granted to the selected account either explicitly or through nested group membership on the selected managed computer. Access Explorer searches the database for only the selected computer. This report lists the account, computer, permissioned through account, resource, and the permissions granted to each resource. Running a report at this level can take a long time. Unless you need this information, you should consider drilling-down to a lower level and running the report.
Explicit Permissions (run at the Permissioned Account level)	Shows all explicit permissions granted to the selected permissioned through account either explicitly or through nested group membership on the managed computers. Access Explorer searches the database for only the selected permissioned through account. If you select All Accounts, Access Explorer searches the database for each listed permissioned through account. This report lists the account, computer, permissioned through account, resource, and the permissions granted to each resource.
Explicit Permissions (run at the Resource level)	Shows all explicit permissions granted to the selected account either explicitly or through nested group membership on the managed computers. When you drill down to the Resource level, Access Explorer pulls resources for the selected Permissioned Account. The amount of data returned can be very large, so it is recommended that you apply a filter before running the Permissions Report. The report returns the data that displays. This report lists the account, computer, permissioned through account, resource, and the permissions granted to each resource. The applied filter prints on the cover page.
Explicit Access Summary for Accounts	Shows a summary of explicit permissions granted to accounts, including permissions derived through group membership. The report is based on the indexed file permission data collected by Access Explorer. This reports lists the account (including the number of resources with permissions), computer (including total number of resources with permissions), and then the number of resources (files, folders, and shares).
Explicit Access Summary for Computers	Shows a summary of explicit permissions granted to accounts on computers, including permissions derived through group membership. The report is based on the indexed file permission data collected by Access Explorer. This report lists the account, computer (including total number of resources), permissioned through account, and then the number of resources (files, folders, and shares).