Allow or deny access model permissions¶

If you'd like to have Permission Assist update all of the applications and permissions within an access model based on the most recent import data, refer to the following topic: Update access models (realign permissions)

To manually allow or deny permissions within a specific application, complete the following steps:

1. From the Access Models list, select the access model you want to change. The access model's detail page is displayed.
2. Select the Add Application link at the bottom of the applications list (see picture below).

3. Within the Modeling tab (which is displayed by default), select the application you want to change within the list. The permissions are displayed on the right side of the page (see picture below).

   

4. For each privilege you want to allow or deny, select the appropriate Configuration button (Allow, Allowed, Inherit, Inherited, or Deny). For a description of each button and the related inheritance icons, refer to Privileges, configuration, and ideal access.

   Tip

   To save time, permissions can be filtered by selecting the Filter button. The following options are displayed:

   Filter	Action
   Recommended	When selected, this option shows the permissions that are recommended to be allowed based on a participation of 65% or more.
   Configured	When selected, this option shows the permissions that have been granted through the modeling of ideal access. Permissions that have been configured will show as "Allowed".
   Changed	When selected, this option shows the permissions that have been changed since the last committed version of the application within the access model. Permissions that have changed but not yet committed are indicated with a change symbol between the Configuration and Ideal Access columns.
   New	When selected, this option shows the permissions that are new as of the most recent import.
   Unused	By default, all permissions are displayed. When selected, this option shows any permissions that have 0% participation, meaning no one who is enrolled in the access model has been assigned that permission within the application.
   Absent	When selected, this option shows permissions that Permission Assist has seen before, but no longer sees as of the most recent import (for example, permissions that used to exist but don't anymore).

5. As changes are made, the number of changes is displayed to the right of the application name (see picture below).

   

6. When all changes to the application are complete, commit the changes.