戻る
-
タイトル
What permissions does the CLI User require to run the CLI "ListAssignedPolicies" command? -
説明
When running the CLI command "ListAssignedPolicies", what permissions are required for the CLI User? -
原因
The CLI User does require permissions to be able to return the expected results. -
対策
From the TPAM Administration Guide regarding the CLI Command "ListAssignedPolicies":
"Lists access policies assigned to accounts, collections, files, groups, systems or users based on specified filter criteria. ListAssignedPolicies takes the place of both ListPermissions and ListEGPPermissions.
The output of this command is essentially the same data as the entitlement report. All users will be listed, along with their effective permissions over any system. The output can potentially be very large. The CLI user must be an Administrator to return the full list. ISA users will obtain a limited list based upon the scope of their privilege."
Also:
"TIP: At least one of the following options must contain a non-wildcard value in order to run this report:AccessPolicyName, AccountName, CollectionName, FileName, GroupName, SystemName, UserName."