Skip to main content

Standard Reference Tables & Views

The ADPermissions Data Collector gathers essential user and group inventory information into standard reference tables. Unlike other Access Analyzer data collectors, the ADPermissions Data Collector writes data to these tables regardless of the job executing the query.

These tables and their associated views are outlined below:

TableDetails
SA_ADPerms_ACLsAccess Control List entries
SA_ADPerms_ACLTypesTypes of Access Control List entries
SA_ADPerms_DomainsTargeted domains
SA_ADPerms_EffectiveChildrenLinked lists of inheritance in Active Directory
SA_ADPerms_EffectivePermissionChildrenLinked lists of inheritance for permissions
SA_ADPerms_ImportHistoryHistory of all ADPermissions scans
SA_ADPerms_InheritancePermission inheritance
SA_ADPerms_ObjectChangesChanges to Active Directory object permissions
SA_ADPerms_ObjectsActive Directory objects
SA_ADPerms_PermissionsActive Directory permissions
SA_ADPerms_SetsJunction table to associate permissions with ACLs

Views are the recommended way for Access Analyzer users to obtain the information gathered by the ADPermissions Data Collector. They contain additional information for building queries easily. The following is an explanation of the corresponding views created for some of the tables generated by the ADPermissions Data Collector:

ViewsDetails
SA_ADPerms_AuditChangesViewThe view of changes to audits that were applied to the objects
SA_ADPerms_AuditsExtViewThe extended view of audits applied to the objects
SA_ADPerms_AuditsViewThe view of object audits
SA_ADPerms_OwnershipChangesViewThe view of object ownership changes
SA_ADPerms_PermissionsChangesViewThe view of changes to permissions applied to the objects
SA_ADPerms_PermissionsExtViewThe extended view of permissions applied to the objects
SA_ADPerms_PermissionsViewThe view of object permissions