Chat now with support
Chat with Support

The Quest and One Identity Support Portals will be unavailable on Friday July 10, 2020 from 5:30 PM to 6:30 PM for website maintenance.

Security Explorer 9.8 - User Guide

Getting Started with Security Explorer Managing permissions Searching Managing security Managing objects
Managing folders and files Managing shares Managing registry keys Managing services Managing tasks Managing groups and users Managing Favorites Managing Enterprise Scopes Updating licenses Managing network drives
Working with Microsoft SQL Server Working with Microsoft Exchange
Checking minimum requirements Viewing Exchange permissions Granting Exchange permissions Revoking Exchange permissions Cloning Exchange permissions Searching for Exchange server objects and permissions Backing up and restoring Exchange server security Modifying Exchange permissions Managing Exchange group memberships Exporting Exchange security permissions Creating Exchange databases Creating public folder mailboxes Managing Exchange administrators Managing Exchange distribution groups Managing mail contacts Managing mail users Managing mailboxes Managing mailbox folders Managing public folders Using role based access control Setting options for Exchange security
Working with Microsoft SharePoint Working with Access Explorer Working with Microsoft Active Directory Customizing Security Explorer Using the command line Using PowerShell cmdlets Troubleshooting

Viewing SharePoint permissions

NOTE: The View Permissions task opens the Browse tab.
NOTE: The first time you select a SharePoint® server, you are prompted to install the SharePoint Web Services. See Deploying the SharePoint web service.
NOTE: If the Always open authentication dialog check box is selected on the SharePoint tab of the Options dialog box, the SharePoint Authentication box appears. Enter the necessary credentials, and click OK. See Setting SharePoint options.

There are three ways to select a SharePoint server. See Using the Navigation pane.

Expand Network Neighborhood in the Navigation pane to view a list of all sites for a selected server, including the Central Administration site.
Type a URL in the Path box, and click Set. A new root node is created in the Navigation pane.
Type a URL in the Path box, and click Go. The site is added automatically to the Favorites list.

The Objects pane displays the sites, subsites, lists, and items, such as documents, calendar items, and events, for the selected server. See Using the Objects pane. Select an object to view its permissions in the Permissions pane. See Using the Permissions pane.

Granting SharePoint permissions

TIP: The Grant task provides a quick way to grant permissions. See Using the Grant task. For more options, add a path, and click Switch to Security Explorer Classic (Advanced).
To grant SharePoint® permissions
1
Open the SharePoint Security module.
2
Open the Browse tab.
5
Select Security | Grant Permissions.
Click on the Tool Bar; click Grant on the Control Button Bar; or right-click the object or permission, and choose Grant Permissions.
The Grant SharePoint Permissions dialog box displays the object, and the associated groups and users for the current object.

Revoking SharePoint permissions

TIP: The Revoke basic task provides a quick way to revoke permissions. See Using the Revoke tasks. For more options, add a path, and click Switch to Security Explorer Classic (Advanced).
To revoke SharePoint® permissions
1
Open the SharePoint Security module.
2
Open the Browse tab.
5
Select Security | Revoke Permissions.
Click on the Tool Bar; click Revoke on the Control Button Bar; or right-click the object, and choose Revoke Permissions.
8
To add the group/user to the List of users and groups to revoke list, click Add.

Revoke all permissions for the selected user

Select to revoke all permissions for the selected user.

Verify SharePoint accounts when adding to the list below

Select to verify the selected account when you click Add.

Advanced Revoke Options

Available only for SharePoint sites. If you select this check box, a warning message displays and the Revoke Folder Permissions dialog box becomes inactive, so the other users/groups and permissions you selected are not included in this action. To continue, click Yes.

Revoke all unknown and deleted accounts

Active only when the Advanced Revoke Options check box is selected. Select to revoke permissions on unknown or deleted accounts. The Remove Permissions for Deleted Accounts dialog box opens. See Revoking permissions on unknown accounts.

Revoke all disabled accounts

Active only when the Advanced Revoke Options check box is selected. Select to revoke permissions on all disabled accounts. The Remove Permissions for Disabled Accounts dialog box opens. See Revoking permissions on disabled accounts.

Include protected objects (objects with ‘Inherit Permissions from Parent’ disabled)

Select to revoke permissions on protected objects. If you select the Advanced Revoke Options check box, the Include protected objects check box is selected automatically.

Cloning SharePoint permissions

TIP: The Clone task provides a quick way to clone permissions. See Using the Clone task. For more options, add a path, and click Switch to Security Explorer Classic (Advanced).
To clone SharePoint® permissions
1
Open the SharePoint Security module.
2
Open the Browse tab.
4
Select Security | Clone Group or User.
Click on the Tool Bar; click Clone on the Control Button Bar; or right-click the object, and choose Clone Group or User.
a
In the Source Group or User area, click Advanced User Selection to select the domain or object from which to pull the permissions.
b
In the Destination Group or User area, click Advanced User Selection to select the domain or object to receive the cloned permissions.
c
Click Add.
Table 4. Clone options

Clone Permissions

By default, permissions are cloned.

Clone group memberships

Select to add the destination account to the groups of which the source user is a member. If you choose this check box, a warning message displays. The destination is cloned into the same parent groups as the source. The contents of the groups selected as the source are not cloned. SharePoint groups cannot have their group memberships cloned.

Replace source permissions with destination permissions

Select to change the source permissions to match the destination permissions.

Include protected objects when cloning (objects with ‘Inherit Permissions from Parent’ disabled)

Select to include those objects for which the Allow inheritable permissions from parent to propagate to this object check box is unavailable. See Viewing SharePoint permissions.

Related Documents