If admins are members of different Active Views because of combinations of rights it's hard to find out what effective rights an admin has to an object.

In Active Directory console there's the possibility of viewing the effective right of a user to a specific target OU or object.

Within DRA there should be something similar. I need some Kind of Report to Show the rights of a specific admin to a specific target object and where this rights are from (AA).

During life I receive requests from Operators for rights which I can't decide whether These rights already exist or I really have to extend them.

Comments

  • If an object move is not possible because of rights elevation there should be a report available showing the difference of delegations between the two OUs for a specifc Admin.

  • It is common in our environment for a user or group to be associated with more than one ActiveView. It would great to have this feature.

  • This is a valid request; we are exploring where we can fit this feature into our road map.