Modifying Set Member Permissions

You can modify the permissions for the members of a set to control what other users can do on the objects in the set. Member permissions in a set are the same as the permissions that you see when modifying an object in the set. For example:

• If you have a set of applications, the member permissions available are the same as what you see if you select an application and then click the Permissions page.

  "Application permissions"

  ""

  "Member permissions for an applications set"

  ""

• If you have a set of systems, the member permissions available are the same as what you see from the Permissions page of a system's object details page.

  "System permissions"

  ""

  "Member permissions for a systems set"

  ""

You can only assign member-level permissions on manual systems sets.

There is a 'Member Privilege Elevation' feature that enables you to do the same functions as 'Member Permissions' on Sets, but targeted at Privilege Elevation commands.

For more information about member-level permissions specific to each object type, refer to the following topics:

• Common Permissions
• Additional Application Permissions
• Additional System Permissions
• Additional Domain Permissions
• Additional Secret Permissions
• Additional Account Permissions
• Viewing Temporary Permissions
• Inherited Permissions
• Administrative Rights and Permissions
• Running Reports to View Effective Rights

To assign member-level permissions:

1. In the Admin Portal, navigate to the appropriate area for the object types that below to a set that you want to modify.

   For example, Apps, Resources > Systems, Domains, etc.

2. In the Sets section, right-click a set name, then click Modify.

3. Click Member Permissions.

4. Click Add to search for and select the users, groups, or roles to which you want to grant set‑specific permissions, then click Add.

5. Select the appropriate permissions for each user, group, or role you have added.

6. Click Save.