Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

The Security Visualization Tool is a command-line utility to view and graphically depict security configurations. However, it is sometimes useful to view configurations as stored in the system. The SQL queries on this page enable a database administrator to view information about security configurations. Execute the queries from the EdFi_Security database.

View Permissions Under a Claim Set

Code Block
languagesql
USE EdFi_Security
GO
 
SELECT ClaimSets.ClaimSetName, ResourceClaims.DisplayName, Actions.ActionName
FROM ClaimSets
JOIN ClaimSetResourceClaimsClaimSetResourceClaimActions ON ClaimSetResourceClaimsClaimSetResourceClaimActions.ClaimSet_ClaimSetId = ClaimSets.ClaimSetId
JOIN ResourceClaims ON ResourceClaims.ResourceClaimId = ClaimSetResourceClaimsClaimSetResourceClaimActions.ResourceClaim_ResourceClaimId
JOIN Actions ON Actions.ActionId = ClaimSetResourceClaimsClaimSetResourceClaimActions.Action_ActionId

View Configured Authorization Strategies per Resource Claim 

Code Block
languagesql
USE EdFi_Security
GO

SELECT Actions.ActionName, AuthorizationStrategies.DisplayName AS AuthorizationName, ResourceClaims.ResourceName
FROM  ResourceClaimAuthorizationMetadatas
JOIN ResourceClaims ON ResourceClaims.ResourceClaimId = ResourceClaim_ResourceClaimId
JOIN Actions ON Actions.ActionId = ResourceClaimAuthorizationMetadatas.Action_ActionId
JOIN AuthorizationStrategies ON AuthorizationStrategies.AuthorizationStrategyId = AuthorizationStrategy_AuthorizationStrategyId
ORDER BY ResourceClaim_ResourceClaimId

View Applications in Claim Sets 

Code Block
languagesql
USE EdFi_Security
GO

SELECT Apps.ApplicationName, Apps.ClaimSetName
FROM ClaimSets
JOIN EdFi_Admin.dbo.Applications Apps ON Apps.ClaimSetName = ClaimSets.ClaimSetName