Access Analyzer Result

Anubhav24
Mega Sage
Mega Sage

Hi All,

 

I am trying a simple user permissions to analyze through access analyzer and when I click on "Analyze Permissions" button , I am not getting a pop up of user permissions granted or blocked.

 

Do we need to activate any other permission apart from installing the plugin.

1 ACCEPTED SOLUTION

Hi @Anubhav24 

 

Good to know, I think the same  suggested here , so if you think it works.

*************************************************************************************************************
If my response proves useful, please indicate its helpfulness by selecting " Accept as Solution" and " Helpful." This action benefits both the community and me.

Regards
Dr. Atul G. - Learn N Grow Together
ServiceNow Techno - Functional Trainer
LinkedIn: https://www.linkedin.com/in/dratulgrover
YouTube: https://www.youtube.com/@LearnNGrowTogetherwithAtulG
Topmate: https://topmate.io/atul_grover_lng [ Connect for 1-1 Session]

****************************************************************************************************************

View solution in original post

27 REPLIES 27

Community Alums
Not applicable

Hi @Anubhav24 ,

You will need to specify the criteria first.

This plugin is called "Access Analyzer" and its app id is "sn_access_analyzer". It is available in Vancouver and it is for free.

SandeepDutta_0-1707123809897.png

 

Once installed, you can type "Access analyzer" in the left-hand side menu and you will get two options:

 

SandeepDutta_1-1707123809532.png

 

"Analyze Permissions", allow you to check a new criteria, whereas "Access Analyzer Queries" allows you to re-run previously queried criteria. Let's see what happens if we click on the first option.

 

Specifying a criteria

Once we click in there we will be presented with this form:

 

SandeepDutta_2-1707123810148.png

 

Let's break it down field by field.

 

The field "Analyze by" offers the following options: "User", "Group" or "Role", so that we can specify whether we want to test the access of a given "User", "Group" or "Role".


If "User" is selected then the field close to it will read "Select user", but it will read "Select group" or "Select role" if the other two options are selected.

 

Then the "Rule type" field offers the following options:

  • "Table (Record)" if what we want is to analyse access to a given table
  • "Client callable script include", to check whether an AJAX script can be accessed
  • "UI Page"
  • "REST endpoints". This is quite useful to test integration accounts

If "Table" is selected, we then need to select the table. We can also select a specific record we want to test it with and even a specific field in case we want to check access to a given field instead of the table or record.

 

If "Client Callable script include" is selected then we are only offered another field called "Select script include".

 

If "UI page" is selected then we are only offered another field called "UI Page" where we must select the page we want to analyse.

 

If "REST endpoint" is selected we will be offered to po populate two new fields. One is the "REST endpoint" we want to test, and also the "REST endpoint method" to define whether it is a "GET", "POST", "PUT", "PATCH", "Delete".

 

Finally, there's a "Description" field which we should populate with a sensible description of what we are testing, since we could want to test it again in the future. If so, we will be able to recognise the check and run it again without having to enter all parameters again. 

 

Once we click on "Analyze permissions" we will be presented with the results. In the screen shot below we can see "Procurement" can read and write on Requested Items, but cannot perform any other action such as creating them  or deleting them.

 

SandeepDutta_3-1707123810152.png

 

 

Previously searched criteria

To re-run a previously searched criteria, we can either go to the criteria builder and look just under it or we can access the second left-hand side menu option called "Access Analyzer Queries" which will present you with them directly. By clicking on their hyperlink you will re-run it again.

 

SandeepDutta_4-1707123809912.png

 

 

Hi @Community Alums ,

 

I tried below scenario :

Anubhav24_0-1707124227045.png

 After I click on Analyze Permissions I dont get any results

Community Alums
Not applicable

Hi @Anubhav24 ,

Try with other users or group and confirm if you face the same issue.

 

Hi @Community Alums  ,

Tried with other users still not getting the results. The plugin is there , is there some property which needs to be enabled in order to get the results.