Permissions Report

The Report tab in Access Management is a read-only overview of permissions across the whole installation. It answers three questions the Roles tab cannot.

• What can user X access?
• Who has access to entity Y?
• What does role Z grant?

Switch between the three perspectives with the toggle at the top.

By user

Permissions Report, By User perspective(click to enlarge)

Select a user on the left. The right panel shows their effective permissions:

1. A permission tree grouped by model, then entity.
2. A CRUD badge on each entity, combined across all the user's roles.
3. Attribute-level Read and Write badges when you expand an entity.
4. A via [Role Name] label on each row, naming the role that grants it.
5. An amber banner for administrators: *Administrator — full access to everything*.

By entity

Permissions Report, By Entity perspective(click to enlarge)

Select an entity in the model tree on the left. The right panel shows:

1. Summary stats — how many users have access, how many have full CRUD, how many are read-only.
2. A sortable table with the columns User, Roles, C, R, U, D, Mod, and Source.
3. Source — whether the access comes from an entity permission, a model permission, or administrator rights.

Click any column header to sort.

By role

Permissions Report, By Role perspective(click to enlarge)

Select a role on the left. The right panel shows:

1. The role name, description, and member list.
2. A read-only permission tree of models and entities with CRUD badges.
3. Attribute-level badges when you expand an entity.
4. An amber banner on administrator roles, because they bypass every check.

Shared controls

• Search — filter the left list as you type.
• Expand All / Collapse All — open or close every tree node at once.
• Export CSV — download the current view. The file is built in the browser; no server call is made.
• Cross-navigation — click a role badge in the user perspective to jump to that role, and back again.

Related

• Roles & Permissions — change what the report shows
• Preview As — see the effect instead of reading it
• Administrator & Moderator — why some rows say "full access"
• User Management — the accounts listed here