Blog article

Show effective permission groups of a user

by Ute Schwietering

When a user logs into a workplace in a Windows domain he works with a series of permissions which the operating system determins on the basis of the information contained in Active Directory. The user can be a member of various groups holding permissions. These groups can again contain other groups. Furthermore, there are workplace-dependent (so-called local) groups.

On account of this possibility of group definitions it can be difficult to determine the effective permissions of any one user.

With Parks Authorization Manager (PAM) the groups which a chosen user holds for a particular workplace can be displayed immediately after logging in.

The groups are hierarchically displayed so that memberships are recognisable. Furthermore, a distinction is made between local groups and domain groups.

Go back