How to delegate read-only access to the Advanced Details Pane (4321672)

By default, the Advanced Details Pane does not display any contents in read-only mode.

How to grant read-only access to the following Advanced Details Pane tabs:

• AR Server Security
• AR Server Policy
• Member Of
• Native Security

1. To display the Advanced Details Pane, delegate the following permission on the Organizational Unit containing users or other objects you want to enable viewing it for. Apply to this object and all child objects.
   
   Note: this will display the Advanced Details pane and its tabs, but you will need to delegate addional permissions to view contents of the AR Server Security tab.
   
   Type: Allow
   Permission: Read Control
   Apply To: User *
   
   * You can specify any object class that you want to view the Advanced pane for, i.e. group, computer, etc.

• To display the contents of the AR Server Security tab, delegate the following permissions on the ActiveRoles Server | Configuration container. Appy to this object and all child objects.
  
  Type: Allow
  Permission: List
  Apply To: edsACE
  
  Type: Allow
  Permission: Read All Properties
  Apply To: edsACE
  
  Type: Allow
  Permission: Read All Properties
  Apply To: edsAccessTemplate
• The contents of the AR Server Policy tab will be displayed by default.
  
  Note: It is controlled by the built-in AR Server Security - Configuration Objects access template that is delegated to Authenticated Users on the Configuration container by default.
• To display the contents of the Member Of tab, delegate the following permissions on the Organizational Unit:
  
  Type: Allow
  Permission: Read Member Of
  Apply To: user ( or group )
• The contents of the Native Security tab will be displayed by default.

• Make sure the View | Advanced Details Pane option is selected in ARS MMC Console
• All four tabs will be displayed under Advanced Details pane. It is not possible to hide one of the tabs.
• It is not possible to hide the contents of the Native Security tab. It is controlled by the Read Control permission.