[Preview] Checking access

As an Organization Administrator or Tenant Administrator, you can view all roles and permissions assigned to a user, group, robot account, or external application at the tenant and service level. This allows for streamlined management of access control, as well as effective troubleshooting and audit processes across all services within a tenant.

To check the assigned roles and permissions, take the following steps:

1. Navigate to Admin, choose the Manage Access card, then select the Check access button. A new page containing a search box opens, allowing you to search for users, groups, robot accounts, and external applications.
2. In the search box, enter the name or the email address of the account you wish to investigate, and initiate the search. The resulting screen provides the following details on the account:

   • Role assignment: This area lists all the roles granted to the account you searched for. It distinctly indicates how each role has been assigned, whether through explicit setting or inheritance.

     Note:

     Selecting a specific role allows you to see the permissions associated with that role. If necessary, you can change the role and permission assignment using the links in the Asignment from column.

   • Permission assignment: This area lists all permissions associated with the role of the account you searched for. Note that we differentiate between the following types of permissions:

     • Standard permissions - By default, you see all CRUD (Create/Read/Update/Delete) permissions. You can also check the permissions given for specific actions.

     • Additional permissitions - You see all non-CRUD, service-specific permission.