AD_GroupPermissions Job
The AD_Permissions job reports on all Active Directory permissions and ownership applied to group objects within the targeted domains.
Analysis Tasks for the AD_GroupPermissions Job
Navigate to the Active Directory Permissions Analyzer > 2.Groups > AD_GroupPermissions > Configure node and select Analysis to view the analysis tasks.
warning
Do not modify or deselect the selected analysis tasks. The analysis tasks are preconfigured for this job.
The default analysis tasks are:
- List group object permissions – Creates the SA_AD_GroupPermissions_Details table accessible under the job’s Results node
- Summarize group object permissions – Creates an interim processing table in the database for use by downstream analysis and report generation
- Group Ownership – Lists the owners of each group object and determines if they are a non-standard owner. Principals that are not administrators are considered non-standard owners of group objects.
- Group Ownership Summary – Summarizes owner type by domain
In addition to the tables and views created by the analysis tasks, the AD_GroupPermissions job produces the following pre-configured reports.
| Report | Description | Default Tags | Report Elements |
|---|---|---|---|
| Group Ownership | This report highlights instances where Active Directory group objects are owned by non admin principals. This information is summarized at the domain level. | None | This report is comprised of two elements:
|
| Group Permissions | This report highlights instances where permissions are applied to Active Directory group objects. This information is summarized at the domain and enterprise levels. | None | This report is comprised of three elements:
|