Permission Lists

Permission lists (PSCLASSDEFN, sometimes called classes) are the lowest-level grantable security object.

Permission Lists

URL: /permissionlists

Permission lists (PSCLASSDEFN, sometimes called classes) are the lowest-level grantable security object. Every menu, component, page, and function authorization attaches to one.

Walkthrough: Exploring Permission Lists in psLens
Permission list detail page showing properties, access settings, and related security information

Permission list detail page with the core definition and the access relationships needed for audit work

What You Can Do

  • View Full Definitions: See description, last modified information, and general settings.
  • View Authorizations: See which menus and components the permission list authorizes.
  • View Assigned Roles: See which roles include this permission list.
  • Sign-on Settings: View allowed sign-on times and other access constraints.

When It’s Useful

  • Auditing what access a particular permission list grants before assigning it.
  • Incident response: what could a compromised permission list have touched.
  • Finding permission lists that are overly broad (see also the Full Access Permission Lists report).