Regresar
-
Título
What permissions does the CLI User require to run the CLI "ListAssignedPolicies" command? -
Descripción
When running the CLI command "ListAssignedPolicies", what permissions are required for the CLI User? -
Causa
The CLI User does require permissions to be able to return the expected results. -
Resolución
From the TPAM Administration Guide regarding the CLI Command "ListAssignedPolicies":
"Lists access policies assigned to accounts, collections, files, groups, systems or users based on specified filter criteria. ListAssignedPolicies takes the place of both ListPermissions and ListEGPPermissions.
The output of this command is essentially the same data as the entitlement report. All users will be listed, along with their effective permissions over any system. The output can potentially be very large. The CLI user must be an Administrator to return the full list. ISA users will obtain a limited list based upon the scope of their privilege."
Also:
"TIP: At least one of the following options must contain a non-wildcard value in order to run this report:AccessPolicyName, AccountName, CollectionName, FileName, GroupName, SystemName, UserName."