Setting user permissions for a specific endpoint

To add a user or group:

1. In the User permissions for endpoint '<Display-Name>' dialog, click Add.
2. In the Add User/Group dialog box, select User or Group.

3. Enter the name for the new user or group in the following format:

   • NetBIOS_name\user (for example: qa\qa)
   • machine_name/local_user (for example: re2008r2js1\JohnMil1)
   • username - This format is supported with SAML authentication only. The user/group name can contain any Unicode character up to 255 characters and must be a valid Identity Provider user (Okta or Microsoft Azure).
4. Click OK to add the user or group and close the dialog box.
5. Click OK to accept the changes, or Cancel to undo them.

To remove a user or group:

1. In the User permissions for endpoint '<Display-Name>' dialog, select the user or group you want to remove.
2. Click Remove.
3. When prompted, click Yes to confirm.
4. Click OK to accept the changes, or Cancel to undo them.

To edit a user's permissions:

1. In the User permissions for endpoint '<Display-Name>', adjust the permission slider for a user or group as desired.

   Information note

   Adjusting the slider stops inheritance from the parent object.

2. Click OK to accept the changes or Cancel to undo them.

The following table summarizes the roles required for adding and editing the endpoint.

By default, inheritance is enabled for all objects (users and groups). This means that permissions are automatically carried over from the parent object. You can turn inheritance on or off for all objects at the current level.

To turn off inheritance:

1. In the User permissions for endpoint '<Display-Name>' dialog, click Disable Inheritance.

   Information note

   This option disconnects the entire authorization level from the parent level.

2. In the Disable Inheritance dialog box, select whether you want to:

   • Convert inherited permissions on this object into explicit permissions: This option changes inherited permissions to explicit permissions. Any new users or groups will not inherit permissions from the parent.
   • Remove all inherited permissions from this object: This option removes all existing permissions inherited from the parent level. Any new users or groups will not inherit permissions from the parent.

3. Click Disable.

   If you chose to convert inherited permissions, the check mark in the Inherited column changes into an X. If you chose to remove inherited, all users and groups disappear from the list.

4. Click OK to accept the changes or Cancel to undo them.

To turn on inheritance:

1. In the User permissions for endpoint '<Display-Name>' dialog, click Enable Inheritance.

   Information note

   This option enables inheritance for all users and groups on this level.

2. In the Enable Inheritance dialog box, select whether you want to:

   • Inherit all permissions from parent and override any definition manually made at this level: This option reinstates inherited permissions for all users and groups that are already defined, and new users and groups will inherit their permissions from the parent level.
   • Inherit all permissions from parent but keep definitions manually made at this level: This option preserves the permissions already defined for the existing users and groups and adds all permissions from the parent level. New users and groups will inherit permissions from the parent level.
3. Click Enable.
4. Click Save or OK to accept the changes, or Discard Changes or Cancel to undo them.

To restore inherited permissions for a single user or group if they were overridden:

1. In the User permissions for endpoint '<Display-Name>' dialog, select the user or group.

2. Click Restore Inheritance.

   The check mark returns to the Inherited column to indicate that permissions for this user or group are inherited from the parent.

To view effective permissions for a user:

1. In the User permissions for endpoint '<Display-Name>' dialog, do one of the following:

   • Select a user in the list on the left.

   • If a user does not appear in the list but exists in the system and is part of a group, enter the user name in the text field in the Effective Permissions pane on the right.

     Make sure to use the following format:

     • NetBIOS_name\user (for example: qa\qa)
     • machine_name/local_user (for example: re2008r2js1\JohnMil1)

2. Click Get Effective Permissions.

   The effective permissions for the user you entered appear below the button.