Question: Is there a way to list out permissions for the Scheduler role so we can get a screen shot?
What the audit people want to know is if there is a way to show/list the “permissions” of each identity, that way, we can get a screen shot of that….
Release : 11.3.6
Component : CA Workload Automation AE (AutoSys)
There are no command line reports that will specifically display a user, their group memberships, and/or what that user or members of a specific group will have access to.
From the EEM UI you can display an individual user and display their details, showing their group membership.
You can also set the filters on the manage identities tab so you can display all users who are a member of a specific group.
You can also set the filters on the manage access policies tab so you can list any policies that reference that user or group.
You can export the user/groups/application from the UI to an xml file.
If you have specifically assigned a user to an application group that relationship would be seen.
If you specifically assigned an id to a dynamic user group that too would be seen.
If the users are not internal to EEM, meaning they are in your ldap, then their global user/group details are not be exported/listed.