Permissions - Access Control
Select a permission value for each attribute. We can add or remove permissions for each attribute users are authorized to read or write. Attribute permissions are not applicable to static operations.
- Attributes table
- Lists the set of attributes users are authorized to work
with. If we want all attributes to have the same permission, select the permission from the Select all read list
or Select all write list. To sort the table by a specific column, click the arrow in the column heading. The table contains these columns:
- Attribute
- Specifies an attribute of the object. For example, the attribute for a person object might be the given name of the user. For an account object, the attribute might be the maximum age that an account remains valid after a password expires.
- Read
- Select a permission from the list.
- Write
- Select a permission from the list.
We can select one of these values in the list.
- Grant
- Permission is explicitly granted for performing the operation.
- Deny
- Permission is denied for performing the operation. Use the Deny selection sparingly, because an explicit denial overrides all other choices. Consider using the None selection instead of the Deny
selection. If you deny the read operation for an attribute that appears in a table on the user interface, users can see the attribute, but cannot obtain its detailed information.
Generally, if a user is granted permission to view or modify an attribute, the user can also see the attribute on the user interface even if read permission is denied. For example, if an access control item grants permission to define an access group, a member of the access control item can also view the access group list, regardless of whether the operation to view group members is granted or denied.
- None
- The permission is not granted or denied, which is interpreted as an implicit denial. If you implicitly deny the read operation for an attribute that appears in a table on the user interface, users can see the attribute, but cannot obtain its detailed information.
Click other tabs to specify additional information. Then, either click OK to save the changes or Apply to save your changes and continue.
Parent topic: Change Access Control Item
