RoleManager Analyze Edition – Visualize, Evaluate, and Clean Up Permissions
Does any of this sound familiar?
- You’ve lost track of your permission structures.
- Your Active Directory has become a tangled mess over the years.
- The group hierarchy in your Active Directory is no longer manageable.
- There are too many paths through which employees gain access to the file system.
- You’re unable to assess the risks hidden in your permission distribution.
- You lack a clear overview of who has which permissions in which systems.
If so, you're not alone — many organizations face the same challenges.
Now imagine being able to clean up everything once and for all and finally regain full visibility of your permissions. That’s exactly what the RoleManager Analyze Edition enables you to do!
What Does the RoleManager Analyze Edition Do?
The RoleManager Analyze Edition is the ideal tool to visualize and evaluate the permission structures and distributions of systems such as Active Directory, file systems, or SAP. It helps both business units and IT departments clean up the complex environments that have evolved over the years.
Below is an overview of the functional areas of the RoleManager Analyze Edition. Detailed information about each area can be found further down this page.
Visualize: Clear visualization of collected data on organizational structures, identities, accounts, permissions, and permission hierarchies — with extensive filtering and display options
Evaluate: Assessment of user and permission data to identify inconsistencies, anomalies, and errors — forming the basis for cleanup actions
Control: Ongoing monitoring of compliance with corporate policies and governance rules
RoleManager Analyze Edition Use Cases
If any of the following use cases apply to you, then the RoleManager Analyze Edition is exactly the right solution!
- You want to visualize, analyze, and clean up the permission structure and distribution in your systems, such as Active Directory, file systems, or SAP.
- You are currently implementing or planning to implement an IAM system and want to clean up permissions in the target systems beforehand or in parallel.
- You need to provide information — due to compliance requirements — about who has what permissions in which systems.
- You want to define rules to prevent critical permission combinations and monitor compliance with those rules.
Schedule your free and non-binding initial consultation now!
Work with one of our specialists to find out how you too can benefit from using the RoleManager in your project.
| Free Initial Consultation: RoleManager |
Application Area Visualize – Visualization of User and Permission Data
Functions:
- Flexible, configurable data import for organizational data, identities, accounts, permissions, and permission structures from any system
- Separate data storage without impacting productive systems
- Central visualization of user and permission data across containers, domains, and system boundaries
- Additional listing of NTFS access permissions: “Who has what access to which directory/file and through which path?”
- Clear representation of relationships between organization, identities, and permissions, distinction between inherited and direct permission assignments
- Color-coded highlighting of key attributes and characteristics
- Comprehensive comparison operations, filtering and reporting functions, as well as configuration of custom reports
- Extensive export functions for further processing
Application Area Evaluate – Assessing User and Permission Data
Functions:
- Identification of the most frequently assigned permissions
- Listing of identities with the highest number of permissions
- Comparison of permission assignments for any selection of users
- Detection of anomalies and inconsistencies in the Active Directory group structure
- Identification of questionable NTFS permission groups and nested group relationships
Application Area Control – Ensuring Compliance with Rules and Policies
Functions:
- Definition of compliance rules to prevent critical combinations of permissions
- Verification of adherence to the defined compliance rules
- Identification of high-risk accounts in Active Directory, e.g., due to non-compliance with password policies
- Detection of multiple inheritance paths for NTFS permissions
Technical Information
The RoleManager Analyze Edition is based on a client-server architecture and is
- usable even without an Identity & Access Management (IAM) solution
- independent of any existing IAM systems
- flexibly configurable for data import from any systems
- Windows- and database-based
- multilingual (German and English, extendable)
- multi-user capable
- operable via predefined user profiles
- auto-update capable
| Free Initial Consultation: RoleManager |