How to change user permissions how to had remove users from the built-in roles (4311382)

Return

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title

How to change user permissions how to had remove users from the built-in roles
Description

We have the advertised security groups in AD, however there are no members present. I have access to Change Auditor myself but I cannot see any AD security groups I have membership of which look to be related to Change Auditor.

The built-in roles in CA have users and groups defined during the installation that cannot be edited or removed.
Cause

The groups are the ones on your AD by default you should have 3 groups Administrators, Operators and web

Within Change Auditor you can configure the roles to grant them specific tasks. if you go to

View > Administration Tasks > Configuration > Application User Interface

https://support.quest.com/technical-documents/change-auditor/user-guide/33#TOPIC-1744997
Resolution

It is possible to change or delete the Group names using "Authorization Manager" in Microsoft Windows.

1) Make a backup of the 'AzManXmlStore.xml' file in the coordinator folder C:\program files\quest\change auditor\service

2) Start mmc.exe on the Coordinator server

3) File ==> Add/Remove snap-in ==> Authorization Manager

4) Right-click "Authorization Manager" and select "Open Authorization Store", XML-file option, browse to C:\Program Files\Quest\ChangeAuditor\Service\AzManXmlStore.xml

5) Drill down to "Role Assignments" and choose a role from

Operator Role

Administrator Role

AD Protection Role

Web Client Shared Overviews Role

6) Add/Remove/Rename the groups users

7) Log-in using the new account

Let me know if this helps

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Request a KB Article

How to change user permissions how to had remove users from the built-in roles (4311382)

Title

Description

Cause

Resolution

Leave a Comment