Overriding Application Entitlements


Product(s):Entitlement Management
Area:Application Entitlements
Sub-AreaExceptions

Purpose

General Access (or access to an application) is a way of controlling access on the application level and is configured per-application.

Entitlement Management allows you to override the General Access setting for individual users by adding the Exceptions.

If the General Access is set to Allowed, then the Exception will deny access to that application.

If the General Access is set to Disallowed, then the Exception will allow access to that application.

Adding Exception(s)

NOTE:

Depending on the General Access you will see different options when adding the exceptions:

There are two types of exceptions that can appear on the list:

  1. Entitlement Groups.
  2. Users.

Entitlement Group Exceptions

Entitlement Group(s) will appear on the list of exceptions automatically as soon as you add the application(s) to a list of Allowed Applications on the Entitlement Group(s) configuration page. For more details, see: How to add Allowed Applications to restrict users in a group to a strict list of entitlements

Users

To add specific users to the Exceptions list:

  1. Navigate to the Entitlement / License Management page.

  2. In the sidebar navigation open Settings > Access and Alerting.

    Access and Alerting navigation

  3. Click the General Access hyperlink in the Access column next to the product, to which you want to add the exception(s). Having an extensive list of applications you may quickly find the desired product by clicking the funnel icon in the Application column - start typing the application name for immediate sorting.

    General Access hyperlink for the application

  4. On the application entitlement page click the Create Exception button, it will drop down an option to add user(s) - click User(s) option.

    Create Exception by adding users

  5. In the pop-up Create User Exception(s) window start typing the name of the user for immediate sorting below the search box. Click the name to add the user to the exception list - the pop up window stays opened and you can add more users to the exception list, if needed.

    Pop-up window to add users

Removing Exception(s)

To remove Entitlement Group(s) from the Exceptions list, you need to remove the application from the list of Allowed Applications on the Entitlement Group configuration page. For more details, see: How to add Allowed Applications to restrict users in a group to a strict list of entitlements

To remove Users, select the check box(es) next to the user(s) (or existing groups) you want to remove from the exception list, and click the Delete Exception above the exception list.

Deleting exception

Note: Depending on the General Access the colors of the button will be either green (when the exception was blocking the access) or red (when the exception was allowing the access).

Switching Access

You can switch access for the Exceptions, which can be useful when you switch the General Access.

To switch access, select the check box(es) next to the Entitlement Group(s) and/or user(s), for which you want to switch the access and click the Switch Access button above the exception list.

NOTES:

Other Language Sources

Deutsch