.. meta::
   :description: Effective access in Micetro
   :keywords: Micetro access model

.. _acl-effective-access:

Effective Access
----------------

The **Effective access** dialog box is useful for checking access for a user/group, and to troubleshoot access control problems.


Administrator with access to managing users/groups in Micetro can check the effective access of a user or group based on the role(s) the user/group is assigned to.

1. Navigate to :menuselection:`Admin --> Configuration`.

2. Select :guilabel:`Users` or :guilabel:`Groups`, depending on whose access you want to check.

3. Select the user/group in the grid, and then select :guilabel:`View effective access` on either the :guilabel:`Action` or Row :guilabel:`...` menu.

   Micetro Access
      Shows all **enabled** permissions for the user/group.

   .. image:: ../../images/effective-access-micetro.png
      :width: 80%
      :align: center

   Object Access
      Here you can select an object type and search for a specific object to check the access the selected user/group has, as well as where the access comes from.

   .. image:: ../../images/effective-access-object.png
      :width: 80%
      :align: center

.. note::
   The **Effective access** dialog box will display detailed warnings if permissions to the selected object are set, but a parent permission is not.

   *Example:* examining effective access on a DNS zone might reveal that the user is attached to a role that has permission to view DNS zones, but no permission to use the DNS module.

.. tip::
   By hovering over the :guilabel:`i` icon in the permissions list, the role(s) where the permission was set is displayed.