How to view the DRA powers for the console user

  • 7022843
  • 11-Apr-2018
  • 07-May-2018

Environment

NetIQ Directory and Resource Administrator 8.x
NetIQ Directory and Resource Administrator 9.x
NetIQ Directory and Resource Administrator REST Services 9.x

Situation

How to view what roles / powers / active views are assigned to the logged on user?

How to find the DRA security assignments for the logged on user?



Resolution

Using the Win32 Console (known as the Account and Resource Management Console or Delegation and Configuration Console):
  1. Navigate to the File Menu
  2. Choose the DRA Properties option
  3. Click the link for powers
    • This will allow the end user to see what powers and what active views apply to their logged on account

Using the DRA 9.x Web Console (URL contains \DRAClient for a website name):

  1. Once logged on, click the link at the top of the page displaying the logged on user name
  2. Click the option for assignments
    • This will allow the logged on user to see what DRA roles, powers and Active Views are assigned to them.
    • This also allows you to filter by power / roles / active view

Using the legacy DRA 8.x Web Console (URL contains \DRA for a website name):

  1. Once logged on, click the link at the top of the page labeled about
  2. From the about DRA page, click the client information link
    • This will allow the logged on user to see what DRA roles, powers and Active Views are assigned to them.


Cause

DRA allows the end user, also known as the assistant admin to view the DRA security directly assigned to their AA account. This can be useful when needing to find out what active views are assigned to the end user. This also becomes useful when the end user has both a normal AD account and a privileged AD account.

Additional Information

This listing of active views / powers / roles does not show what powers apply for the logged on user to a specific AD object. This list only shows a list of all possible powers / roles / actives, which could apply to the logged on user.