I have been given the task of locating all the 'delete' permissions we have in ARS after a couple of mistakes cost several departments a days work. I do very little work in our ARS implementation, it was setup 10-12 years ago and mostly works for us. I've started looking through each template and noting the ones with 'Delete' in them but there is bound to be an easier way.
Is there a way to scan all the templates at once to locate any that have the delete permission? Powershell maybe?
Hi ldandridge
The information about the permissions granted by an Access Template is listed within an attribute called edsaATEList, and is stored in a similar manner to ACE entries (IE in a Security Descriptor Definition Language) IE (note I've removed the [ and ] around the blocks ofd permissions and filtered out the ones I'm not interested in):
Nick.Dollimount published something related to what you are trying to do
Access Template Link Reporting - Forum - Active Roles Community - One Identity Community
