I'm trying to validate that everyone has the correct access levels on a system.
The system is called WinSAS
There are 6 databases called Accrual, GroupIns, Industry, Msttrust, Staff, Whsale
Access Type is the actual permissions. All options are listed in the WinSASPerms worksheet.
All Access Types given to a user are the same across all databases given to the user on that 1 line.
Users may have multiple lines to vary the access across the databases.
I'd like to have a report of what we need to do to change the accounts on the SARMS_WinSAS sheet to match the InfraRecords sheet. InfraRecords is the law, this is what people are supposed to have.
Rules:
- - We cannot modify the InfraRecords sheet as it will be used for everyother application
- - It is fine to add sheets, add to sheets or reformat sheets as long as InfraRecords is not permanently altered.
- - Any "Salary" in SARMS_WinSAS sheet that does not match a "Sap Id" in InfraRecords sheet that has an "App Name" of WinSAS should be marked as "Delete"
- - Any "Sap Id" in InfraRecords sheet that has an "App Name" of WinSAS that is not listed as a "Salary" in SARMS_WinSAS should be marked as "Create"
- - Each row in SARMS_WinSAS has 3 important columns of "Salary", "Database" and "Group". If these do not match InfraRecord's "Sap ID", "Access Details"(everything is in the 1 cell for Access Details) where "App Name" is "WinSAS" at least once (there can be multiple entries for each person) then we need to mark that as a "Permission to Remove".
- - All entries in InfraRecords that have WinSAS as the App Name must have each Database and Access Type accounted for in the SARMS_WinSAS sheet. (I think we can use the array from WinSASPerms to look for each one and report on successs or fail) If there is a fail then report should say "Permission to Add"
- - There may be entries in InfraRecords where the "Profile" in column J is "BA070" which means the Access Details will start with the word "Repview. These lines can be ignored.
- - Any starting with "Database: SASCheque" can also be ignored.
Perhaps the best way is to extract each permission from InfraRecords and put it into the WinSASinfra sheet in the same format as the SARMS_WinSAS sheet and then a simple comparison can be done. This is why I created the sheet to start with but perhaps you know of a faster method?
Bookmarks