About Users and Groups name list precedence
When a module or a
security check contains User and Group name lists, the names in the
Group list are processed first. Then, within each selected group,
the names in the User list are processed.
Table: Single Users and Groups name list
results summarizes the results that you receive from the name
lists that include or exclude User or Group entries.
Table: Single Users and Groups name list
results
|
When the check
|
And the users list
|
And the groups list
|
Then the check reports
|
|
Includes a user or group name list
|
contains user entries
|
is blank
|
data for all reported users
|
|
Includes a user or group name list
|
is blank
|
contains group entries
|
data for all reported groups and users that are in the
checks
|
|
Excludes a user or group name list
|
contains user entries
|
is blank
|
data for all groups and users except the reported users
|
|
Excludes a user or group name list
|
is blank
|
contains group entries
|
data for all groups except the reported groups and users that
are in the checks
|
|
Includes or excludes blank name lists
|
is blank
|
is blank
|
data for all groups and users
|
Some modules include the
Users to Check options with name lists that more than one security
check use. Some of the security checks that use the Users to Check
name lists also use their own name lists.
When a security check
uses two Users and Groups name lists, the combined contents of the
name lists are processed.
Table: Multiple Users and Groups name lists
summarizes the checks and name lists for multiple users and
groups.
Table: Multiple Users and Groups name lists
|
Check option
|
Check name lists
|
Check reports
|
|
Includes Users/Groups entries
|
Includes Users/Groups entries
|
Data about all groups and their users, and all users, in both
user lists
|
|
Includes Users/Groups entries
|
Excludes Users/Groups entries that are included by Users to
Check
|
No data about groups and users in the check name lists
|
|
Excludes Users/Groups entries
|
Include Users/Groups entries that are excluded by Users to
Check
|
No data about groups and users in Users to check name lists
|
|
Excludes Users/Groups entries
|
Excludes Users/Groups entries
|
No data about groups and users that are in the name lists
|
|
Includes or excludes blank name lists
|
Include or Exclude blank name lists
|
Data for all groups and users
|
