Compliance Information Analysis Reports › Compliance Report - List Resources by Role or User

Compliance Report - List Resources by Role or User

The List Resources by Role or User report lists all of the resources that a specific role or userid has access to, and the conditions under which access is permitted.

The report can be customized with the following controls:

• The report can be requested for a single system image or for multiple system images.
• The report can be requested for a specific user or a specific role.
• If the report is for a specific user, that user can be identified in one of two ways:
  • With a userid
  • With a global ID, which is used to determine the userids that correspond to the user
• The report can identify special attributes for the role or user that permit the role or user access to resources regardless of specific policy recommendations.
• For users who are listed for a system image or global ID, the report can include the user name field.
• For resource authorizations that have time, day, and date controls, the report can include time, day, and date information.
• The report can include or omit information about resources that are permitted to all users.

This report answers the following compliance questions:

• For a user or profile, what special attributes does the user or profile have that permit access regardless of specific policy recommendations?
• For a user or profile, what resources does the user or profile have access to through resource ownership?
• For a user or profile, what resources does the user or profile have access to through resource policy (PERMITs) and under what conditions?