Auditor
This user can access the repository in read only mode, he can also read the log and print the report.
- The Auditor will be granted the Auditor and Restricted Auditor permission sets by default.
- Depending on the permission sets the Auditor will be assigned following permissions by default:
| Description | Remarks |
| Auditor Permissions | |
| Applications\Can Read All Applications | This permission gives you the right to read all applications. |
| Users\Can Read All Users | This permission gives you the right to read all users. |
| Groups\Can Read All Groups | This permission gives you the right to read all groups. |
| Restricted Auditor Permissions: | The restricted auditor role will have access to applications for which he has been granted “Membership Manager” role. |
| Applications\Can Read Application | This permission gives you the right to read applications for which you have the role “Membership Manager” |
| Audit and Reporting\Can Generate Documentation | This permission gives you the right to generate documentation. |
| Audit and Reporting\Can Read Event Log | This permission gives you the right to read an Event Log. |
| Groups\Can Read Group | This permission gives you the right to read group. |
| Users\Can Read User | This permission gives you the right to read user. |
| Permissions\Can Read Permission | This permission gives you the right to read a permission. |
| Permission Sets\Can Read Permission Set | This permission gives you the right to read a permission set. |
| Roles\Can Read Application Role | This permission gives you the right to read an application role. |
| Roles\Can Read Shared Role | This permission gives you the right to read a shared role. |
| Roles\Can Read System Role | This permission gives you the right to read a system role. |
Impact of Auditor Role on Applications
This module explains the impact on the applications if the user has been granted Auditor Role.
- The User will be assigned following permissions:
| Description | Remarks |
| Can Read All Applications | This permission gives access to read all applications. |
| Can Read Application | This permission gives you the right to read applications for which you have the role “Membership Manager”. |
- Once the user logs in using the assigned mode of authentication, the following screen will be displayed:
- Since the user has permissions to Can Read All Applications and Can Read Application, the Can Read All Applications will override.
- The user will be able to view list of all the applications. (A)
- The user can click on the Application name to view the application information as shown below:
- Other application related options will be disabled as shown below:
Impact of Auditor Role on Audit and Reporting
This module explains the impact on the audit and reporting if the user has been granted the Auditor Role.
- The User will be assigned following permissions:
| Description | Remarks |
| CanGenerateDocumentation | This permission gives you the right to generate documentation. |
| Can Read Event Log | This permission gives you the right to read an Event Log. |
- Once the user logs in using the assigned mode of authentication, the following screen will be displayed.
- The user will be able to view list of all the applications (A).
- Since the user has permissions to Can Generate Documentation he can use Generate Documentation option to generate documentation of each entity in the Visual Guard console.
- Can Read Event Log permission allows access to viewing the event log as shown below:
Impact of Auditor Role on Groups
This module explains the impact on the groups if the user has been granted an Auditor Role.
- The User will be assigned following permissions:
| Description | Remarks |
| \Groups\CanReadGroup | This permission gives access to read a group for which you have the role “Membership Manager”. |
| \Groups\CanReadAllGroups | This permission gives you the right to read all the groups. |
- Once the user logs in using the assigned mode of authentication, the following screen will be displayed.
- The user will be able to view list of all the applications (A).
- Since the user has permissions to Can Read All Groups and Can Read Groups, the Can Read All Groups will override.
- The user will be able to view list of all the groups.
- The user cannot rename, remove or add a new group, the options will be disabled as shown below:
Impact of Auditor Role on Permissions
This module explains the impact on the permissions if the user has been granted an Auditor Role.
- The User will be assigned following permissions:
| Description | Remarks |
| Can Read Permission | This permission gives you the right to read a permission. |
- Once the user logs in using the assigned mode of authentication, the following screen will be displayed.
- The user will be able to view list of all the applications (A).
- Since the user has permissions to Read permissions all permission details will be displayed in read only mode. (A)
- Additionally the options to rename, remove or add a new permission will also be disabled as shown below:
Impact of Auditor Role on Permission Sets
This module explains the impact on the permission sets if the user has been granted an Auditor Role.
- The User will be assigned following permissions:
| Description | Remarks |
| Can Read Permission Sets | This permission gives you the right to read a permission set. |
- Once the user logs in using the assigned mode of authentication, the following screen will be displayed:
- The user will be able to view list of all the applications (A).
- Since the user has permissions to Read permission sets all permission set details will be displayed in read only mode. (A)
- Additionally the options to rename, remove or add a new permission set will also be disabled as shown below:
Impact of Auditor Role on Roles
This module explains the impact on the roles if the user has been granted an Auditor Role.
The User will be assigned following permissions:
| Description | Remarks |
| Can Read Application Role | This permission gives you the right to read an application role. |
| Can Read Shared Role | This permission gives you the right to read a shared role. |
| Can Read System Role | This permission gives you the right to read a system role. |
- Once the user logs in using the assigned mode of authentication, the following screen will be displayed:
- The user will be able to view list of all the applications (A).
- Since the user has Can Read Application Role privilege he can view just the role details.
- Additional options such as rename, remove or add a new role will be disabled as shown below:
- Similarly the Can Read Shared Role privilege will allow the user to view the shared role information in read only mode.
- Additional options such as rename, remove or add a new role will be disabled as shown below:
- Similarly the Can Read Special Role privilege will allow the user to view the special role information in read only mode.
- Additional options such as rename, remove or add a new role will be disabled as shown below:
Impact of Auditor Role on Users
This module explains the impact on the users if the user has been granted an Auditor Role.
- The User will be assigned following permissions:
| Description | Remarks |
| Can Read All Users | This permission gives you the right to read all users |
| Can Read User | This permission gives you the right to read user |
- Once the user logs in using the assigned mode of authentication, the following screen will be displayed:
- The user will be able to view list of all the applications (A).
- Since the user has both the privileges namely Can Read All Users and Can Read User permissions, Can Read All Users permission will override.
- Can Read All Users permission will allow the user to view the list of all users.
- The user can view the user details by clicking on username.
- All details will be displayed in read only mode.
See Also:
- Special Roles
- Impact of granting multiple roles
- Special Roles & Permission Matrix