Active Mapping for Exclusive Access
Active Mapping lets you define the principles of access in your IT environment by letting you map User groups with Account Groups. This means that all the Users in the mapped User Group get access to all the accounts in the mapped Account Group. However, if you wish that a particular User from the mapped User group should be given access only to a few accounts from the mapped Account Group, you can switch to the Exclusive Access option. If you have mapped multiple User Groups with Account Group(s), you can select one User from each User Group and then decide which accounts to be given exclusive access to.
Procedure:
To link one User exclusively with (multiple) accounts:
- Go to Policies → Active Mapping → New Active Mapping →Fill up the Name and Description
- Check the desired User group and on the other side select the desired Account groups.
- Select the Exclusive Only option.
- Click on Save.
- Go to Policies →Exclusive Access.
- Select the user group and one of the account groups, it was mapped to.
- You will find a list of Users and Accounts.
- You can select one User and give him exclusive access to multiple accounts by selecting the respective accounts.
To link multiple Users (each from a separate user group) exclusively with (multiple) accounts:
- Policies → Active Mapping → New Active Mapping →Fill up the Name and Description.
- Check the desired User group and on the other side select the desired Account groups.
- Select the Exclusive Only option.
- Click on Save.
- Go to Policies → Exclusive Access.
- Click on Search.
- You will find a list of Users and Accounts.
- You can select one User and give multiple account access by selecting the respective accounts.