Bastionhost supports multiple authorization methods. You can authorize a user to manage assets or asset groups on the Users page, authorize a user group to manage assets or asset groups on the User Groups page, or configure an authorization rule on the Authorization Rules page. This topic describes how to view the authorization details of users and user groups, how to view the assets and users that are associated with an authorization rule, and how to export the authorization data.
Prerequisites
The authorization is complete. For more information, see Authorize users or user groups to manage assets and asset accounts, Grant permissions on asset groups, and Authorization rules.
View authorization data
View the authorization details of users
Log on to the Bastionhost console. In the top navigation bar, select the region in which your bastion host resides.
In the bastion host list, find the bastion host that you want to manage and click Manage.
In the left-side navigation pane, choose .
On the Users page, view the authorization details of users.
In the user list, you can view the number of hosts, databases, and asset groups that each user is authorized to manage.
You can also click the name of a user to view the assets and asset groups that the user is authorized to manage on the Users, User Groups, and Authorization Rules page.
View the authorization details of user groups
Log on to the Bastionhost console. In the top navigation bar, select the region in which your bastion host resides.
In the bastion host list, find the bastion host that you want to manage and click Manage.
In the left-side navigation pane, choose .
On the User Groups page, view the authorization details of user groups.
In the user group list, you can view the number of hosts, databases, and asset groups that each user group is authorized to manage.
You can also click the name of a user group to view the assets and asset groups that the user group is authorized to manage.
View the assets and users that are associated with an authorization rule
Log on to the Bastionhost console. In the top navigation bar, select the region in which your bastion host resides.
In the bastion host list, find the bastion host that you want to manage and click Manage.
In the left-side navigation pane, click Authorization Rules.
On the Authorization Rules page, click the name of a rule. On the Asset/User tab of the Authorization Details page, you can view the assets, asset groups, users, and user groups that are associated with the rule.
Export authorization data
Log on to the Bastionhost console. In the top navigation bar, select the region in which your bastion host resides.
In the bastion host list, find the bastion host that you want to manage and click Manage.
In the left-side navigation pane, choose .
On the Users page, click Export Authorization Data in the upper-right corner.
The authorization data is exported to your computer as a CSV file.