1 / 8

Assignment # 8

This assignment explores the delegation of permissions within the Marketing and Training Organizational Units (OUs). It focuses on Ahmad Ali's effective permissions on the Training OU, where several permissions, including the ability to create, delete, and reset passwords, are allowed, while read permission is denied. The assignment emphasizes how Deny permissions take precedence over Allow permissions, leading to the conclusion that Ahmad Ali’s resultant Permission Set Object (PSO) will align with the Training PSO due to its GUID, making it the most effective authority applied to him.

camden-davenport
Download Presentation

Assignment # 8

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Assignment # 8

  2. Q1:Marketing group has delegated permissions on the HR OU

  3. Marketing group has delegated permissions on Training OU

  4. Ahmad Ali has delegated permissions on Training OU

  5. The effective permissions Ahmed Ali will have on Training OU -Deny read permission. -Allow Create all child objects. -Allow reset password. -Deny modify owner. -Allow Delete all child objects.

  6. 1 4 Because the Deny permission (3,4) overrides Allow permission (5,2) and Explicit Allow (6) override Inherited Deny(7). 2 5 3 6 7 8

  7. The resultant PSO applied to Mr. Ahmed -If one or more PSOs linked directly to the user, PSOs linked to groups are ignored. So, Special PSO doesn’t apply because it not linked directly to Ahmad Ali. -If there are different PSOs, the PSO has highest precedence (lower Precedence) will be apply. Marketing_Security & Training PSO have the same precedence. -If PSOs have the same precedence, the PSO with lowest GUID will be apply. Training PSO with lowest GUID=11. So, The resultant PSO is Training PSO

More Related