Access Control

Overview

Supports granting and revoking management of access permissions to web applications managed by the organization for QueryPie users and groups. Access Control represents the final step for implementing and applying web app access permissions.

Viewing Access Control Status

1. Navigate to Administrator > Web Apps > Web App Access Control > Access Control menu.
2. You can search by user/group name through the search field in the top left of the table.
3. You can refresh the user/group list through the refresh button in the top right of the table.
4. The table list displays the following information for each user/group:a. User Type : User/group typeb. Provider : Represents the user/group’s providerc. Name : User/group named. Email : User email addresse. Members : List of members belonging to the groupf. Roles : Number of assigned Roles
5. Clicking a row in the Access Control list navigates to the detailed page for the target user/group.
   1. Roles
      1. This is the default tab where you can view the list of assigned Roles.
      2. You can search by Role name.
      3. The list displays the following information for each Role:
         1. Name : Role name
         2. Description : Role detailed description
         3. Expiration Date : Expiration date
         4. Last Access At : Last call date and time for this role
         5. Granted At : Date and time when the Role was assigned to this user/group
         6. Granted By : Administrator name who assigned this Role to the user/group
   2. Just-in-time Access
      1. You can view the list of web apps that have acquired temporary access permissions. Temporary access permissions can be requested through the “Web App Just-In-Time Access Request” in Workflow.
      2. You can search by web app name.
      3. The list displays the following information for each web app:
         1. Web App Name : Web app name
         2. Expiration Date : Temporary access permission expiration date
         3. Last Access : Last access date and time
         4. Granted By : Administrator name who granted temporary access permissions
         5. Granted At : Date and time when temporary access permissions were granted
      4. Administrators can immediately revoke Just-in-Time (JIT) access permissions granted to users even before the expiration date. When permissions are revoked, the user’s web app session is immediately terminated.
         1. Select the item for which you want to revoke permissions from the Just-in-Time Access menu list.
         2. Click the Revoke button located in the top left of the list.
         3. When the permission revocation confirmation window appears, check the content and click the confirmation button to finally revoke the permissions.
   3. Web Apps
      1. Lists the web application list accessible by assigned Roles.
      2. You can search by web app name, Role name.
      3. The list displays the following information for each web app:
         1. Name : Web app name
         2. Base URL : Web app URL
         3. Description : Web app description
         4. Tags : List of tags attached to the web app
         5. Role : List of related Roles
         6. Created At : Web app initial creation date and time
         7. Updated At : Web app last modification date and time
   4. Web Apps by User Group
      1. Lists the web application list accessible through Roles inherited from User Groups that the user belongs to. This allows you to clearly identify web apps accessible due to group permissions.
      2. You can search by web app name.
      3. The list displays the following information for each web app:
         • Name : Web app name
         • Base URL : Web app URL
         • Description : Web app description
         • Tags : List of tags attached to the web app
         • Created At : Web app initial creation date and time
         • Updated At : Web app last modification date and time