Views to Use in Custom Reports

Database views provide an easier and more secure way to share the reporting data without having to expose the database tables directly. Each view is essentially a database query. Some columns refer to columns in other views, and these relationships are noted.

Understanding the Differences Between Views

There are many views that are very similar to each other but provide different levels of details related to role assignments and so forth. This section briefly covers the differences between views so that you can decide which view to use, based on your needs.

When choosing which view to use, keep in mind that a view that provides less detail results in a faster query response time.

What is Included in a View	Which Views You Can Use
A list of who can log in to which computers	EffectiveAuthorizedUsers_Computer (Including computers in classic and hierarchical zones) EffectiveAuthorizedUsers_Computer_Classic (Only computers in classic zones) EffectiveAuthorizedUsers_Computer_Hierarchical (Only computers in hierarchical zones
A list of who can log in to which computer and what privileges are granted to these users	EffectiveLoginUserPrivileges_Computer EffectiveAuthorizedUserPrivileges_Computer (Same as EffectiveLoginUserPrivileges_Computer, just to consist the naming as the other views)
A list of Active Directory users' effective role assignments	EffectiveRoleAssignment (Both hierarchical & classic zones) EffectiveRoleAssignment_Classic (Classic zones only) EffectiveRoleAssignment_Hierarchical (Hierarchical zones only)
A list of the Active Directory users' effective privileges at the computer level (The Active Directory users list in the view may not have the access right to the computer)	EffectiveRolePrivileges_Computer
A list of the Active Directory users' effective system rights at the computer level (The Active Directory users list in the view might not have the access right to the computer)	EffectiveSysRights
A list of the authorized users’ privileges The list indicates if a role or right supports its accessibility to the computer	EffectiveUserPrivileges_Computer
A list of the Active Directory users' privileges at the computer role level	EffectiveUserPrivileges_ComputerRole_Unix (Assuming all computers managed by the Computer Role are UNIX) EffectiveUserPrivileges_ComputerRole_ Windows (Assuming all computers managed by the Computer Role are Windows)
A list of the Active Directory users' privileges at the Zone level	EffectiveUserPrivileges_Zone_Unix (Assuming all computers managed by the Zone are UNIX) EffectiveUserPrivileges_Zone_Windows (Assuming all computers managed by the Zone are UNIX)
Local users	EffectiveAuthorizedLocalUsers_Computer (A local users' version to the EffectiveAuthorizedUsers_Computer) EffectiveAuthorizedLocalUserPrivileges_Computer (A Local users' version to the EffectiveLoginUserPrivileges_Computer) EffectiveLocalUsersRoleAssignment (A Local users' version to the EffectiveRoleAssignment)

ADComputers View

The ADComputers view lists all Active Directory computers for each monitored domain.

Column name	Description	Refers to
ADComputer_-Account-Enabled	1 – Active Directory computer’s account is enabled, 0 – account is disabled
ADComputer_AccountEnabled_Desc	The display value for ADComputer_Role (Yes/No)
ADComputer_-Canonical-Name	Active Directory computer’s canonical name
ADComputer_CnName	The Active Directory computer’s common name.
ADComputer_-Description	The description to the Active Directory computer
ADComputer_-Dns-Host-Name	Active Directory computer’s dnsHostName
ADComputer_DomainId	The identification number of the computer’s domain.	Domains.Id
ADComputer_Domain-Name	The name of the domain that the Active Directory computer belongs to.
ADComputer_-GUID	The object GUID of the Active Directory computer
ADComputer_Location	The Active Directory computer’s location.
ADComputer_ManagerGUID	The hosting Active Directory computer’s GUID for the user or group.
ADComputer_ManagerObjectName	The Active Directory computer’s manager object name.
ADComputer_ManagerType	The type of computer manager. 1=user, 2=group.
ADComputer_ManagerType_Desc	The description of the Active Directory manager type.
ADComputer_ObjectName	The object name of the computer, in the format of <computer CN>.<computer domain>.
ADComputer_-OS	Active Directory computer’s operating system
ADComputer_-Os-Version	Active Directory computer’s operating system version
ADComputer_OU	The OU of the Active Directory computer. It will be null if the computer is not under an OU
ADComputer_PwdLastChangedTime	The last changed time for Active Directory computer’s password (UTC time). This is an approximation only.
ADComputer_Role	Whether the computer is running as a domain controller or not 1 - workstation role, 2 - domain controller role
ADComputer_Role_Desc	The display value for ADComputer_Role (Workstation/Domain Controller)
ADComputer_-Sam-Account-Name	Active Directory computer’s samAccountName
ADComputer_-Time-Created	The creation time of the Active Directory computer (UTC time)
ADComputer_TrustedDelegate	Allows services to act on behalf of another user.

Adcomputers Columns Used in Other Views

Column name	Referred from other view
ADComputer_-GUID	ADGroupComputerMembers.ADComputer_GUID ComputerRoleMembership.ADComputer_GUID ZoneComputers.ZoneComputer_ADComputerId

ADComputers_Stale View

The ADComputers_Stale view lists all stale Active Directory computers for each domain. Computers are considered as stale if the passwords for them haven’t changed for 90 or more days.

Column Name	Description	Refers to
ADComputer_AccountEnabled	1 – Active Directory computer’s account is enabled, 0 – account is disabled
ADComputer_AccountEnabled_Desc	The display value for ADComputer_Role (Yes/No)
ADComputer_-Canonical-Name	Active Directory computer’s canonical name
ADComputer_CnName	The Active Directory computer’s common name.
ADComputer_-Description	The description about the Active Directory computer
ADComputer_DnsHostName	Active Directory computer’s dnsHostName
ADComputer_DomainId	The ID of the computer’s domain	Domains.Id
ADComputer_DomainName	The name of the domain which the Active Directory computer belongs to
ADComputer_GUID	The object GUID of the Active Directory computer
ADComputer_ObjectName	The object name of the computer, in the format of <computer CN>.<computer domain>.
ADComputer_OS	Operating system of Active Directory computer
ADComputer_OsVersion	The operating system version number of the Active Directory computer.
ADComputer_OU	The OU of the Active Directory computer. It will be null if the computer is not under an OU
ADComputer_PwdLastChangedTime	The last changed time for Active Directory computer’s password (UTC time). This is an approximation only.
ADComputer_-Role	Whether the computer is running as a domain controller or not 1 - workstation role, 2 - domain controller role
ADComputer_Role_Desc	The display value for ADComputer_Role (Workstation/Domain Controller)
ADComputer_SamAccountName	Active Directory computer’s samAccountName
ADComputer_-Time-Created	The creation time of the Active Directory computer (UTC time)

ADGroupComputerMembers View

The ADGroupComputerMembers lists all computers that are members for each Active Directory group. Nested members are included.

Column Name	Description	Refers to
ADComputer_CanonicalName	The canonical name of the Active Directory computer
ADComputer_CnName	The Active Directory computer’s common name.
ADComputer_DnsHostName	The DNS host name of the Active Directory computer
ADComputer_GUID	The GUID of the Active Directory computer	ADComputers.ADComputer_GUID
ADComputer_ObjectName	The object name of the computer, in the format of <computer CN>.<computer domain>.
ADComputer_Os	The operating system name of the Active Directory computer
ADComputer_OsVersion	The OS version of the Active Directory computer
ADComputer_SamAccountName	The samAccountName of the Active Directory computer
ADGroup_CanonicalName	The canonical name of the Active Directory group
ADGroup_GUID	The GUID of the Active Directory group	ADGroups.GUID
ADGroup_Name	The name of the Active Directory group
ADGroup_ObjectName	The display name for the Active Directory group, formatted as <group samAccountName>@<domain name>.

ADGroups View

The ADGroups view lists all Active Directory groups for each domain.

Column Name	Description	Refers to
ADGroup_ManagerGUID	The hosting Active Directory computer’s GUID for the user or group.
ADGroup_ManagerObjectName	The object name for the user or group who manages this group.
ADGroup_ManagerType	The type of object that is the manager for this group. 1=user, 2=group.
ADGroup_ManagerType_Desc	The description of the Active Directory manager type.
CanonicalName	Active Directory group’s canonical name
Description	Active Directory group’s description
DomainId	The identification for the domain which the Active Directory group belongs to	Domains.Id
Email	Active Directory group’s email
GroupName	Active Directory group’s name
GUID	The object GUID of the Active Directory group.
IsBuiltIn	1 – is built in group, 0 – is not built in group
NTLogonName	The NT logon name (samAccountName) of the Active Directory group
ObjectName	The display name for the Active Directory group, formatted as <group samAccountName>@<domain name>.
OU	The OU of the Active Directory group. It is null if the group is not under an OU
TimeCreated	The creation time of the Active Directory group (UTC time)
Type	The scope of the Active Directory group 1 - domain local, 2 - global, 3 - universal

ADGroups columns used in other views

Column name	Referred from other view
ADGroups.GUID	ADGroupComputerMembers.ADGroup_GUID ADGroupUserMembers.ADGroup_GUID EffectiveZoneGroups.ZoneGroup_ADGroup_GUID ZoneGroups.ZoneGroup_ADGroup_GUID EffectiveUserPrivileges_Computer.Trustee_Id EffectiveUserPrivileges_ComputerRole.Trustee_Id EffectiveUserPrivileges_Zone.Trustee_Id

ADGroupSubGroups View

Lists the Active Directory group and the nested groups, including children groups and grand-children groups.

Column Name	Description	Refers to
ParentGroup_CanonicalName	The canonical name of the parent group
ParentGroup_DomainId	The domainID of the parent group	Domains.Id
ParentGroup_DomainName	The domain name of the parent group
ParentGroup_GroupType	The group type of the parent group 1-Domain local, 2-Global, 3-Universal
ParentGroup_GroupTypeDesc	The display value for ParentGroup_GroupType (Domain local/Global/Universal)
ParentGroup_NTLogonName	The NTLogonName of the parent group
ParentGroup_ObjectName	The object name of the parent group. The general display value for the AD group in precanned report. Format:<AD group samAccountName>@<domain Name>
ParentGroup_ParentGroupGUID	The object GUID of the parent group	ADGroups.GUID
ParentGroup_ParentGroupName	The name of the parent group
SubGroup_CanonicalName	The canonical name of the sub group
SubGroup_DomainId	The domainIDof the sub group	Domains.Id
SubGroup_DomainName	The domain name of the sub group
SubGroup_EffectiveSubGroupGUID	The object GUID of the sub group	ADGroups.GUID
SubGroup_GroupName	The group name of the sub group
SubGroup_GroupType	The group type of the sub group 1-Domain local, 2-Global, 3-Universal
SubGroup_GroupTypeDesc	The display value for SubGroup_GroupType (Domain local/Global/Universal)
SubGroup_NTLogonName	The NTLogon name of the sub group Note: There is also a column with a similar name, SubGroup_NTLogoName, that will be deprecated in a future release.
SubGroup_ObjectName	The object name of the sub group. The general display value for the AD group in precanned report. Format:<AD group samAccountName>@<domain Name>

ADGroupUserMembers View

The ADGroupUserMembers view lists all user members for each Active Directory group. Nested members are included.

Column Name	Description	Refers to
ADGroup_CanonicalName	The canonical name of the Active Directory group
ADGroup_GUID	The GUID of the Active Directory group	ADGroups.GUID
ADGroup_Name	The name of the Active Directory group
ADGroup_ObjectName	The display name for the Active Directory group, formatted as <group samAccountName>@<domain name>.
ADUser_GUID	The GUID of the Active Directory user	ADUsers.ADUser_GUID
ADUser_Name	The name of the Active Directory user
ADUser_ObjectName	The object name for the Active Directory user.
ADUser_SamAccountName	The samAccountName of the Active Directory user
ADUser_UPN	The upn name of the Active Directory user

ADUsers View

The ADUsers view lists all Active Directory users for each monitored domain.

Column Name	Description	Refers to
ADUser_AccountExpiryDate	The expiration date for the Active Directory user account.
ADUser_AccountLockedUntil	The date and time until which time that the user’s account is locked.
ADUser_AccountLockedUntil_Desc	The description text string for the ADUser_AccountLockedUntil field.
ADUser_CannotBeDelegated	Cannot be delegated.
ADUser_CanonicalName	The canonical name of the Active Directory user
ADUser_City	The city of the Active Directory user
ADUser_Company	The company of the Active Directory user
ADUser_Country	The country of the Active Directory user
ADUser_CreationTime	The creation time of the Active Directory user
ADUser_Department	The department of the Active Directory user
ADUser_Description	The description of the Active Directory user
ADUser_DialInCallbackNumber	The dialin callback number of the Active Directory user
ADUser_DialInCallbackOptions	The dialin callback options of the Active Directory user
ADUser_DialInCallerId	The dialin callerIDof the Active Directory user
ADUser_DialInStaticIp	The dialin static IP address of the Active Directory user
ADUser_DialInStaticRoutes	The dialin static routes of the Active Directory user
ADUser_DisplayName	The display name of the Active Directory user
ADUser_DomainId	TheIDof the Domain	Domains.Id
ADUser_DomainName	The name of the Domain
ADUser_Email	The email of the Active Directory user
ADUser_Enabled	If the Active Directory user account is enabled 1 – Enabled, 0 - Disabled
ADUser_Enabled_Desc	The description string for the aduser_enabled (Yes / No)
ADUser_FaxNumbers	The fax numbers of the Active Directory user
ADUser_FirstName	The first name of the Active Directory user
ADUser_GUID	The GUID of the Active Directory user
ADUser_HomePhoneNumbers	The home phone numbers of the Active Directory user
ADUser_Initials	The initials of the Active Directory user
ADUser_IpPhoneNumbers	The ip phone numbers of the Active Directory user
ADUser_IsNeverExpire	Specifies if the user account is set to never expire.
ADUser_IsNeverExpire_Desc	The description text string for the ADUser_IsNeverExpire column.
ADUser_JobTitle	The job title of the Active Directory user
ADUser_LastLogonTime	The last logon time of the Active Directory user
ADUser_LastName	The last name of the Active Directory user
ADUser_LogonScriptPath	The logon script path of the Active Directory user
ADUser_ManagerGUID	The hosting Active Directory user's GUID of the user or group
ADUser_ManagerObjectName	The Active Directory user's manager object name
ADUser_ManagerType	The Active Directory user's manager type 1 - User, 2-Group
ADUser_ManagerType_Desc	The Active Directory user's manager type description (User/Group)
ADUser_MobilePhoneNumbers	The mobile phone numbers of the Active Directory user
ADUser_Name	The name of the Active Directory user
ADUser_ObjectName	The display name for the Active Directory user, formatted as <user samAccountName>@<domain name>.
ADUser_Office	The office of the Active Directory user
ADUser_PagerPhoneNumbers	The pager phone numbers of the Active Directory user
ADUSer_PasswordNeverExpire	Password set to never expire.
ADUser_PhoneNumbers	The phone numbers of the Active Directory user
ADUser_PoBox	The post office box address of the Active Directory user.
ADUser_PostalCode	The postal code (zip code) of the Active Directory user.
ADUser_PreauthenticationNotRequired	Pre-authentication not required.
ADUser_PrimaryGroupId	The primary group ID of the Active Directory group.
ADUser_ProfileHomeFolder	The profile home folder of the Active Directory user
ADUser_ProfilePath	The profile path of the Active Directory user
ADUser_PwdLastSetTime	The password last set time of the Active Directory user. This is an approximation only.
ADUser_PwdStoreUsingReversibleEncryption	Password stored using reversible encryption.
ADUser_RemoteAccessPermissions	The remote access permissions of the Active Directory user
ADUser_SamAccountName	The samAccountName of the Active Directory user
ADUser_SmartCardNeededForLogon	Smart card needed for login.
ADUser_State	The state of the Active Directory user
ADUSer_Street	The Active Directory user’s street address.
ADUser_TrustedForDelegation	Trusted for delegation.
ADUser_Upn	The upn name of the Active Directory user
ADUser_UseDesEncryption	Uses DES Encryption.
ADUser_WebPages	The web pages of the Active Directory user

ADUser Columns Used in Other Views

Column name	Referred from other view
ADUsers.ADUser_GUID	ADGroupUserMembers.ADUser_GUID EffectiveUserPrivileges_Computer.ADUser_GUID EffectiveUserPrivileges_ComputerRole.ADUser_GUID EffectiveUserPrivileges_Zone.ADUser_GUID EffectiveZoneUsers.ZoneUser_ADUserGUID ZoneUsers.ZoneUser_ADUserGUID EffectiveUserPrivileges_Computer.Trustee_Id EffectiveUserPrivileges_ComputerRole.Trustee_Id EffectiveUserPrivileges_Zone.Trustee_Id

ApplicationRight View

The ApplicationRight view lists the detailed attributes for each application right.

Column Name	Description	Refers to
Right_Description	The description of the application right
Right_FullName	The full name of the right <right name>/<zone name>
Right_GUID	The GUID of the Right	Rights.Right_GUID
Right_Name	The name of the application right
Right_Priority	The priority of the application right
Right_RequireAuthentication	If this right requires authentication 1 – Yes, 0 – No
Right_RequireAuthentication_Desc	If this right requires authentication (Yes/No)
Right_RunasUser	Run as the specified AD user
Right_ZoneId	The Id of the Zone that the Right belongs to	Zones.Zone_Id
Right_ZoneName	The name of the Zone that the Right belongs to

AutoZoneComputers View

The AutoZoneComputers view lists the computers that are joined to the AutoZone.

Column Name	Description	Refers to
ZoneComputer_ADComputerCnName	AD computer’s cn name
ZoneComputer_ADComputerId	The GUID of the AD computer	ADComputers_ADComputer_GUID
ZoneComputer_ADComputerName	AD computer’s name
ZoneComputer_ADComputerObjectName	Format: <AD computer CN>.<AD computer domain> Mainly used by precanned-report
ZoneComputer_AgentVersion	The agent version of the Auto Zone Computer
ZoneComputer_ComputerType	The ID of the computer type of the Auto Zone Computer. This value is always 2
ZoneComputer_ComputerType_Desc	The computer type of the Auto Zone Computer. This value is always ‘Unix’
ZoneComputer_Id	The ID of the Auto Zone Computer
ZoneComputer_IsOrphan	To identifier if this is an orphan Auto Zone Computer 1 – Yes, 0 – No
ZoneComputer_IsOrphan_Desc	(Yes/No)
ZoneComputer_Name	The name of the Auto Zone Computer
ZoneComputer_ZoneId	The ID of the zone. Always be -1
ZoneComputer_ZoneName	The name of the zone. The value is always ‘Auto Zone’

CommandRight View

This view lists the detailed attributes for each command right.

Column Name	Description	Refers to
Right_AddVar	Comma separated list of environment variable name-value pairs to add
Right_AllowNested	Nested command execution is allowed or not 1 – Yes, 0 – No
Right_AllowNested_Desc	The description to the Right_AllowNested (Yes/No)
Right_Authentication	Type of authentication required to run the command
Right_DeleteVar	Comma separated list of environment variables to delete in addition to the default set
Right_Description	The description of the command right
Right_DzdoRunAsGroup	Comma separated list of groups allowed to run this command using dzdo
Right_DzdoRunAsUser	Comma separated list of users, uids, groups or gids allowed to run this command using dzdo
Right_DzshRunas	The user this command will run as under dzsh
Right_FullName	The full name of the command rights. Format <command right name>/<zone name>
Right_GUID	The GUID of the command right	Rights.Right_GUID
Right_KeepVar	Comma separated list of environment variables to keep in addition to the default set
Right_MatchPath	The match path of the command right
Right_Name	The name of the command right
Right_Pattern	The pattern of the command right
Right_PatternType	The type of the command right pattern 0 – Global, 1 – Regular expression
Right_PatternType_Desc	The description of the type of the command right pattern (Global / Regular expression)
Right_PreserveGroup	Preserve group membership or not
Right_Priority	The priority of the command right
Right_UMask	The umask value used to define who can execute the command
Right_ZoneId	The ID of the zone that the command right is defined	Zones.Zone_Id
Right_ZoneName	The name of the zone that the command right is defined

ComputerRoleCustomAttribute View

This view lists the computer role custom attributes.

Column Name	Description	Refers to
RoleAssignment_GUID	The computer role’s object GUID.	ComputerRoles.ComputerRole_GUID
CustomAttribute_Name	The custom attribute’s name.
CustomAttribute_Value	The custom attribute’s value.

ComputerRoleEffectiveMembers View

This view lists the effective members of a computer role.

Column Name	Description	Refers to
ComputerRole_GUID	The GUID of the Computer Role
ComputerRole_ZoneId	The zone ID where the Computer Role is defined	Zones.Zone_Id
ComputerRole_ComputerRoleName	The name of the Computer Role
ADComputer_GUID	The object GUID of the Active Directory computer	ADComputes.ADComputer_GUID
ADComputer_DomainId	The ID of the computer’s domain	Domains.Id
ADComputer_ObjectName	Format: <AD computer CN>.<AD computer domain> This field is mainly used by the default reports.
ADComputer_CnName	The Active Directory computer’s cnName
ADComputer_DnsHostName	The DNS host name of the Active Directory computer
ZoneComputer_Id	The ID of the computer
ZoneComputer_ZoneId	The ID of the zone that the computer is managed by	Zones.Zone_Id
ZoneComputer_Name	The name of the computer
ZoneComputer_AgentVersion	The agent version of the computer
ZoneComputer_Platform	The platform of the computer 1 – Windows, 2 – UNIX
ZoneComputer_Platform_Desc	The description string of the ZoneComputer_Platform (Windows/UNIX)
ZoneComputer_IsOrphan	If the computer is orphan 1 – Yes, 0 – No
ZoneComputer_JoinDate	The date when the computer joined zone (UTC time)

ComputerRoleMembership View

The ComputerRoleMembership view lists all computer members for each Computer Role. The view includes computers that have been added into the zone.

Column Name	Description	Refers to
ADComputer_CnName	The Active Directory computer’s common name.
ADComputer_DnsHostName	The dns host name of the Active Directory Computer
ADComputer_DomainId	The domain ID of the Active Directory computer	Domains.Id
ADComputer_GUID	The GUID of the Active Directory computer	ADComputes.ADComputer_GUID
ADComputer_ObjectName	The object name of the computer, in the format of <computer CN>.<computer domain>.
ComputerRole_ComputerRoleName	The name of the Computer Role
ComputerRole_GUID	The object GUID of the computer role
ComputerRole_ZoneId	The ID of the zone where this computer role is defined	Zones.Zone_Id
ZoneComputer_AgentVersion	The agent version of the computer
ZoneComputer_Id	The ID of the computer
ZoneComputer_IsOrphan	If the computer is orphaned 1 – Yes, 0 – No
ZoneComputer_JoinDate	The date when the computer joined zone (UTC time)
ZoneComputer_Name	The name of the computer
ZoneComputer_Platform	The computer platform 1 – Windows, 2 – Unix
ZoneComputer_PlatformDesc	The display value of ZoneComputer_Platform (Windows/Unix)
ZoneComputer_ZoneId	The ID of the zone where the computer is joined to	Zones.Zone_Id

ComputerRoles View

This view lists the computer role information.

Column Name	Description	Refers to
ComputerRole_Description	The description of the Computr Role
ComputerRole_GroupGUID	The GUID of the AD group which the Computer Role monitoring	ADGroups.GUID
ComputerRole_GroupName	The name of the AD group which the Computer Role monitoring
ComputerRole_GUID	The GUID of the Computer Role
ComputerRole_Name	The name of the Computer Role
ComputerRole_ZoneId	The ID of the zone where the Computer Role is defined	Zones.Zone_Id
ComputerRole_ZoneName	The name of the zone where the Computer Role is defined

DelegationTasks View

This view lists which user, group, computer, or well-known SID have which delegation tasks.

Column Name	Description	Refers to
Target	The target in which the Verify Privilege Server Suite task is delegated
Target_DomainId	The domain ID of the target	Domains.Id
Target_GUID	The GUID of the target
Zone_Id	The zone ID	Zones.Zone_Id
Scope	The scope in which the Verify Privilege Server Suite task is delegated
Scope_Id	The scope ID: 1 - Zone; 2 - UNIX Computer; 3 - WINDOWS Computer; 4 - Computer Role
Trustee_Name	The trustee name
Trustee_Type	The trustee type is one of the following: 1 - User; 2 - UNIX computer; 3 - Windows computer; 4 - computer role.
Trustee_Type_Desc	The description of the trustee type
Trustee_DomainId	The domain ID of the trustee	Domains.Id
Task_Id	Task Id	DelegationTaskType.Task_Id
Task_Name	Task name

DelegationTaskType View

This view lists the Verify Privilege Server Suite delegation tasks.

Column Name	Description	Refers to
Task_Name	Task name
Task_Id	Task Id

Domains View

The Domains view lists all monitored domains.

Column Name	Description
Dc	The domain controller for the monitored domain
DomainName	The name of the monitored domain
Id	The ID of the monitored domain

Domains Columns Used in Other Views

Column name	Referred from other view
Domains.Id	ADComputers.ADComputer_DomainID ADComputers_Stale.ADComputer_DomainId ADGroups.DomainId ADUsers.ADUser_DomainID ComputerRoleMembership.ADComputer_DomainId RoleAssignments_ComputerRole.RoleAssignment_ZoneDomainId UserAccounts.ADUser_DomainId ZoneRolePrivileges.ZoneRolePrivileges_RightZoneDomainId Zones.Zone_DomainID Zones_Classic.Zone_DomainID Zones_Hierarchical.Zone_DomainID

EffectiveAuthorizedUserPrivilegesSummary View

This view lists effective privileges rights granted to Active Directory users for both hierarchical and classic zones.

Column Name	Description	Refers to
ADUser_GUID	The object GUID of the Active Directory user that the user profile refers to.	ADUsers.ADUser_GUID
ZoneComputer_ID	The object GUID ID of the computer profile	ZoneComputers. ZoneComputer_Id
Right_GUID	The GUID of the right	Rights.Right_GUID

EffectiveAuthorizedUserPrivilegesSummary__Hierarchical View

This view lists effective privileges rights granted to Active Directory users for just hierarchical zones.

Column Name	Description	Refers to
ADUser_GUID	The object GUID of the Active Directory user that the user profile refers to.	ADUsers.ADUser_GUID
ZoneComputer_ID	The object GUID ID of the computer profile	ZoneComputers. ZoneComputer_Id
Right_GUID	The GUID of the right	Rights.Right_GUID

EffectiveAuthorizedUserPrivilegesSummary_Classic View

This view lists effective privileges rights granted to Active Directory users for just classic zones.

Column Name	Description	Refers to
ADUser_GUID	The object GUID of the Active Directory user that the user profile refers to.	ADUsers.ADUser_GUID
ZoneComputer_ID	The object GUID ID of the computer profile	ZoneComputers. ZoneComputer_Id
Right_GUID	The GUID of the right	Rights.Right_GUID

EffectiveAuthorizedLocalUserPrivileges_Computer View

This view lists the authorized local user’s effective rights and privileges for each computer.

Column Name	Description	Refers to
ADComputer_CanonicalName	The canonical name of the Active Directory computer
ADComputer_CnName	The cn name of the Active Directory computer
ADComputer_DnsHostName	The dns host name of the Active Directory computer
ADComputer_ObjectName	The object name of the Active Directory computer
Assigned_Location	The display value of the source assignment location
Assigned_LocationType	The source assignment location
Assigned_LocationType_Desc	The type of the source assignment location 1 – Zone 2 – Computer 3 – Computer Role
EffectiveZone_Id	The auto generated ID of the Zone	Zones.Zone_Id
EffectiveZone_Name	The name of the Zone
LocalUser_Name	The name of the local user
LocalUser_ProfileState	The profile state of the local user 1 =Enabled, 2 = Disabled, 3 = Removed from /etc/passwd
LocalUser_ProfileState_Desc	The display value for LocalUser _ProfileState (Enabled/Disabled/Removed from /etc/passwd)
Right_FullName	The full name of the right. Format in <Right name> / <Right’s zone name>
Right_Grants_Logon	If this right could support a user to logon to a system 1 – Yes, 0 – No
Right_GUID	The GUID of the right	Rights.Right_GUID
Right_Name	The name of the right
Right_Platform	The ID of the right platform
Right_Platform_Desc	The display value of the right platform
Right_Type	The type ID of the right	RightType.RightTypeId
Right_Type_Desc	The type description of the right
Role_FullName	The full name of the role. Format in <Role name> / <Role’s zone name>
Role_GUID	The GUID of the role	Roles.Role_Id
Role_Name	The name of the role
RoleAssignment_GUID	The object GUID of the role assignment	RoleAssignments.RoleAssignment_GUID
Trustee_Name	The trustee name of the role assignment
Trustee_Type	The trustee type ID of the role assignment	TrusteeTypes.TrusteeType_Id
Trustee_Type_Desc	The type description of the trustee
ZoneComputer_Id	The object GUID ID of the computer profile	ZoneComputers. ZoneComputer_Id

EffectiveAuthorizedLocalUsers_Computer View

This view lists the effective, authorized local users for each computer.

Column Name	Description	Refers to
LocalUser_Name	The name of the local user	ZoneLocalUsers.ZoneLocalUser_Name
ZoneComputer_Id	The ID of the zone computer	ZoneComputers.ZoneComputer_Id
LocalUserProfileState	The state of the local user profile, indicated by a number: Enabled Disabled Removed from /etc/passwd
LocalUser_ProfileState_Desc	The text description of LocalUserProfileState

EffectiveAuthorizedUserPrivileges_Computer View

This view lists the users who are authorized to log in and the computers that they can log in to. This EffectiveAuthorizedUserPrivileges_Computer view is the same as EffectiveLoginUserPrivilege_Computer View .

EffectiveAuthorizedUsers_Computer View

This view lists the users who can log in and the computers that they can log in to.

Column Name	Description	Refers to
ADUser_GUID	The object GUID of the Active Directory user that the user profile refers to.	ADUsers.ADUser_GUID
ZoneComputer_Id	The computer profile’s object GUID.	ZoneComputer.ZoneComputer_ID

EffectiveAuthorizedUsers_Computer_Classic View

This view lists the users who can log in and the classic zone computers that they can log in to.

Column Name	Description	Refers to
ADUser_GUID	The object GUID of the Active Directory user that the user profile refers to.	ADUsers.ADUser_GUID
ZoneComputer_Id	The computer profile’s object GUID.	ZoneComputer.ZoneComputer_ID

EffectiveAuthorizedUsers_Computer_Hierarchical View

This view lists the users who can log in the hierarchical zone computers that they can log in to.

Column Name	Description	Refers to
ADUser_GUID	The object GUID of the Active Directory user that the user profile refers to.	ADUsers.ADUser_GUID
ZoneComputer_Id	The computer profile’s object GUID.	ZoneComputer.ZoneComputer_ID

EffectiveAuthorizedZoneLocalUsers View

This view lists the effective user profiles for local users who can log in and the computers that they can log in to.

Column Name	Description	Refers to
EffectiveZone_Id	The auto generated ID of the Zone	Zones.Zone_Id
EffectiveZone_Name	The name of the Zone
EffectiveZone_DomainId	The domain ID of the Zone
ZoneLocalUser_Id	The auto generated ID of the local user profile	ZoneLocalUsers. ZoneLocalUser_Id
ZoneLocalUser_Name	The name of the local user profile
ZoneLocalUser_HomeDirectory	The home directory of the local user profile
ZoneLocalUser_PrimaryGroupId	The primary group ID of the local user profile
ZoneLocalUser_PrimaryGroupName	The primary group name of the local user profile
ZoneLocalUser_Shell	The shell of the local user profile
ZoneLocalUser_Uid	The UID of the local user profile
ZoneLocalUser_GECOS	The GECOS of the local user profile
ZoneLocalUser_ProfileState	The profile state of the local user profile 1 means Enabled, 2 means Disabled, 3 means Removed from /etc/passwd
ZoneLocalUser_ProfileState_Desc	The display value for ZoneLocalUser_ProfileState (Enabled/Disabled/Removed from /etc/passwd)
ZoneLocalUser_AssignmentLocation_Type	The type code of the location where the zoned local user is assigned
ZoneLocalUser_AssignmentLocation_Type_Desc	The display text of the type of the location where the zoned local user is assigned
ZoneLocalUser_AssignmentLocation_GUID	The GUID of the location object where the zoned local user is assigned
ZoneLocalUser_AssignmentLocation_Name	The name of the location object where the zoned local user is assigned
ZoneComputer_Id	The object GUID of the computer profile	ZoneComputers. ZoneComputer_Id
ADComputer_ObjectName	The object name of the ad computer
ADComputer_DnsHostName	The DNS host name of the ad computer
ADComputer_CnName	The CN name of the ad computer
ADComputer_Os	The operating system of the Active Directory computer
ADComputer_DomainId	The domain ID of the Active Directory computer

EffectiveAuthorizedZoneUsers View

This view lists the authorized Active Directory user’s effective user profiles for each computer.

Column Name	Description	Refers to
EffectiveZone_Id	The auto-generated ID of the Zone	Zones.Zone_Id
EffectiveZone_Name	The name of the Zone
EffectiveZone_DomainId	The domain ID of the Zone
ZoneUser_Id	The auto generated ID of the user profile	ZoneUsers. ZoneUser_Id
ZoneUser_Name	The name of the user profile
ZoneUser_HomeDirectory	The home directory of the user profile
ZoneUser_PrimaryGroupId	The primary group ID of the user profile
ZoneUser_PrimaryGroupName	The primary group name of the user profile
ZoneUser_Shell	The shell of the user profile
ZoneUser_Uid	The UID of the user profile
ZoneUser_GECOS	The GECOS of the user profile
ZoneUser_IsSecondaryProfile	Whether the user profile is a secondary profile or not: 1 – Yes 0 – No
ZoneUser_IsSecondaryProfile_Desc	The display value for ZoneUser_IsSecondaryProfile (Yes/No)
ZoneUser_AssignmentLocation_Type	The type code of the location where the zoned user is assigned
ZoneUser_AssignmentLocation_Type_Desc	The display text of the type of the location where the zoned user is assigned
ZoneUser_AssignmentLocation_GUID	The GUID of the location object where the zoned user is assigned
ZoneUser_AssignmentLocation_Name	The name of the location object where the zoned user is assigned
ADUser_DomainId	The domain ID of the Active Directory user
ADUser_GUID	The GUID of the ad user
ADUser_ObjectName	The object name of the Active Directory user
ZoneComputer_Id	The object GUID ID of the computer profile	ZoneComputers. ZoneComputer_Id
ADComputer_ObjectName	The object name of the Active Directory computer
ADComputer_DnsHostName	The DNS host name of the Active Directory computer
ADComputer_CnName	The CN name of the Active Directory computer
ADComputer_Os	The operating system of the Active Directory computer
ADComputer_DomainId	The domain ID of the Active Directory computer

EffectiveDelegationTasks View

This view lists which Active Directory user has which delegation tasks.

Column Name	Description	Refers to
Target	The target in which the Verify Privilege Server Suite task is delegated
Target_DomainId	The domain ID of the target	Domains.Id
Target_GUID	The GUID of the target
Zone_Id	The zone ID	Zones.Zone_Id
Scope	The scope in which the Verify Privilege Server Suite task is delegated
Scope_Id	The scope ID: 1 - Zone; 2 - UNIX Computer; 3 - WINDOWS Computer; 4 - Computer Role
Trustee_Name	The trustee name
Trustee_GUID	The GUID of trustee
Trustee_DomainId	The domain ID of the trustee	Domains.Id
Task_Id	Task Id	DelegationTaskType.Task_Id
Task_Name	Task name

EffectiveGroupPrivileges_Computer View

This view lists the consolidated role assignments, logon privileges, system rights privileges for each group and computer. This view only lists the role assignments that are assigned to Active Directory groups, and lists the trustee Active Directory groups and nested groups.

Column Name	Description	Refers to
ADComputer_CanonicalName	The canonical name of the Active Directory Computer in where the privileges effective
ADComputer_CnName	The CN name of the Active Directory Computer in where the privileges effective
ADComputer_DnsHostName	The DNS host name of the Active Directory Computer in where the privileges effective
ADComputer_ObjectName	The object name of the Active Directory Computer in where the privileges effective
ADGroup_CanonicalName	The canonical name of the effective assigned Active Directory group
ADGroup_GUID	The GUID of the effective assigned Active Directory group	ADGroups.GUID
ADGroup_Name	The name of the effective assigned Active Directory group
ADGroup_ObjectName	The object name of the effective assigned Active Directory group. The format is <samAccountName>@<domain name>
ADGroup_SamAccountName	The samAccountName of the effective assigned Active Directory group
Assigned_Location	The name of the assignment location
Assigned_LocationType	The type of the assignment location 1 – Zone, 2 – Computer, 3 – Computer Role
Assigned_LocationTypeDesc	The description fo the type of the assignment location (Zone, Computer, Computer Role)
Computer_Platform	The platform ID of the Active Directory Computer in where the privileges effective 1 – Windows, 2 – UNIX
Computer_Platform_Desc	The platform description name of the Active Directory Computer in where the privileges effective (Windows/UNIX)
EffectiveZone_Id	The ID of the effective zone for the privilege assignment	Zones.Zone_Id
EffectiveZone_Name	The name of the effective zone for the privilege assignment
Right_FullName	The full name of the right
Right_Grants_Logon	If this right could support a user to logon to a system 1 – Yes, 0 – No
Right_GUID	The GUID of the right	Rights.Right_GUID
Right_Name	The name of the right
Right_Platform	The platform ID of the right 0 – Windows, 1 – UNIX, 2 – Windows/UNIX
Right_Platform_Desc	The platform description of the right (Windows, UNIX, Windows/UNIX)
Right_Type	The type ID of the right	RightType.RightTypeId
Right_Type_Desc	The type description of the right
Role_FullName	The full name of the role <role name>/<zone name>
Role_GUID	The GUID of the role	Roles.Role_Id
Role_Name	The name of the role
RoleAssignment_GUID	The object GUID of the role assignment	RoleAssignments.RoleAssignment_GUID
Trustee_Id	The GUID of the Trustee	ADGroups.ADGroup_GUID
Trustee_Name	The name of the trustee
Trustee_Type	The type ID of the trustee type	TrusteeTypes.TrusteeType_Id
Trustee_Type_Desc	The type description of the trustee type
ZoneComputer_Id	The ID of the Zone Computer in where the privileges effective	ZoneComputer.ZoneComputer_Id

EffectiveLocalUserPrivilegesSummary View

This view lists effective privileges rights granted to local UNIX users for both hierarchical and classic zones.

Column Name	Description	Refers to
LocalUser_Name	The name of the local user	ZoneLocalUsers.ZoneLocalUser_Name
LocalUser_ProfileState	The state of the local user profile, indicated by number: Enabled Disabled Removed from /etc/passwd
LocalUser_ProfileState_Desc	The text description of LocalUser_ProfileState.
ZoneComputer_Id	The object GUID ID of the computer profile	ZoneComputers. ZoneComputer_Id
Right_GUID	The GUID of the right	Rights.Right_GUID

EffectiveLocalUsersRoleAssignment View

This view lists the effective role assignments for local users for each computer.

Column Name	Description	Refers to
Assigned_Location	The name of the assigned location
Assigned_LocationTypeDesc	The assigned location: zone, computer, or computer role
LocalUser_Name	The name of the local user	ZoneLocalUsers.ZoneLocalUser_Name
LocalUser_ProfileState	The state of the local user profile, indicated by number: Enabled Disabled Removed from /etc/passwd
LocalUser_ProfileState_Desc	The text description of LocalUser_ProfileState.
Role_GUID	The GUID for the role.	Roles.Role_Id
RoleAssignment_GUID	The object GUID of the role assignment	RoleAssignments.RoleAssignment_GUID
RoleAssignment_EndTime	The end date and time for the role assignment.
RoleAssignment_StartTime	The start date and time for the role assignment.
Trustee_Name	The trustee name
Trustee_Type	The type of trustee, indicated by number: Active Directory user Active Directory group Local UNIX user Local UNIX group Local Windows user Local Windows group All Active Directory users All local UNIX users All local Windows users local UNIX UID
Trustee_Type_Desc	The text description of the Trustee_Type
ZoneComputer_Id	The ID of the zone computer.	ZoneComputers.ZoneComputer_Id

EffectiveLoginUserPrivilege_Computer View

This view lists the users who can log in and the computers that they can log in to. .

Column Name	Description	Refers to
ADComputer_CanonicalName	The canonical name of the AD Computer in where the privileges effective
ADComputer_CnName	The Cn name of the AD Computer in where the privileges effective
ADComputer_DnsHostName	The dns host name of the AD Computer in where the privileges effective
ADComputer_ObjectName	The object name of the AD Computer in where the privileges effective
ADUser_CanonicalName	The canonical name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_FullName	The full name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_GUID	The GUID of the assigned Active Directory user. It will be null when trustee type = 7	ADUsers.ADUser_GUID
ADUser_Name	The name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_ObjectName	The display name for the Active Directory user, formatted as <user samAccountName>@<domain name>.
ADUser_SamAccountName	The samAccount name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_Upn	The upn name of the assigned Active Directory user. It will be null when trustee type = 7
Assigned_Location	The name of the assignment location
Assigned_LocationType	The type of the assignment location 1 – Zone, 2 – Computer, 3 – Computer Role
Assigned_LocationTypeDesc	The description fo the type of the assignment location (Zone, Computer, Computer Role)
EffectiveZone_Id	The ID of the effective zone for the privilege assignment	Zones.Zone_Id
EffectiveZone_Name	The name of the effective zone for the privilege assignment
Right_FullName	The full name of the right
Right_Grants_Logon	If this right could support a user to logon to a system 1 – Yes, 0 – No
Right_GUID	The GUID of the right	Rights.Right_GUID
Right_Name	The name of the right
Right_Platform	The platform ID of the right 0 – Windows, 1 – UNIX, 2 – Windows/UNIX
Right_Platform_Desc	The platform description of the right (Windows, UNIX, Windows/UNIX)
Right_Type	The type ID of the right	RightType.RightTypeId
Right_Type_Desc	The type description of the right
Role_FullName	The full name of the role <role name>/<zone name>
Role_GUID	The GUID of the role	Roles.Role_Id
Role_Name	The name of the role
RoleAssignment_GUID	The object GUID of the role assignment	RoleAssignments.RoleAssignment_GUID
Trustee_ID	The ID of the Trustee	Trustee_Type = 1: ADUsers.ADUser_GUID Trustee_Type = 2: ADGroups.ADGroup_GUID
Trustee_Name	The name of the trustee
Trustee_Type	The type ID of the trustee type	TrusteeTypes.TrusteeType_Id
Trustee_Type_Desc	The type description of the trustee type
ZoneComputer_Id	The ID of the Zone Computer in where the privileges effective	ZoneComputer.ZoneComputer_Id

EffectiveRoleAssignment View

This view lists all effective role assignments for each user and for each computer.

Column Name	Description	Refers to
ADUser_GUID	The object GUID of the AD user which the user profile referring to.	ADUsers.ADUser_GUID
Assigned_Location	The source assignment location
Assigned_LocationType	The type of the source assignment location 1 – Zone 2 – Computer 3 – Computer Role
Assigned_LocationType_Desc	The display value of the source assignment location
Role_GUID	The object GUID ID of the role	Roles.Role_Id
RoleAssignment_GUID	The object GUID of the role assignment	RoleAssignments.RoleAssignment_GUID
RoleAssignment_EndTime	The end date and time for the role assignment.
RoleAssignment_StartTime	The start date and time for the role assignment.
Trustee_Id	The trustee ID of the role assignment
Trustee_Name	The trustee name of the role assignment
Trustee_Type	The trustee type ID of the role assignment	TrusteeTypes.TrusteType_Id
Trustee_Type_Desc	The type description of the trustee
ZoneComputer_Id	The object GUID ID of the computer profile	ZoneComputer.ZoneComputer_Id

EffectiveRoleAssignment_Classic View

This view lists all effective role assignments in classic zones for each user and for each computer.

Column Name	Description	Refers to
ADUser_GUID	The object GUID of the AD user which the user profile referring to.	ADUsers.ADUser_GUID
Assigned_Location	The source assignment location
Assigned_LocationType	The type of the source assignment location 1 – Zone 2 – Computer 3 – Computer Role
Assigned_LocationType_Desc	The display value of the source assignment location
Role_GUID	The object GUID ID of the role	Roles.Role_Id
RoleAssignment_GUID	The object GUID of the role assignment	RoleAssignments.RoleAssignment_GUID
RoleAssignment_EndTime	The end date and time for the role assignment.
RoleAssignment_StartTime	The start date and time for the role assignment.
Trustee_Id	The trustee ID of the role assignment
Trustee_Name	The trustee name of the role assignment
Trustee_Type	The trustee type ID of the role assignment	TrusteeTypes.TrusteType_Id
Trustee_Type_Desc	The type description of the trustee
ZoneComputer_Id	The object GUID ID of the computer profile	ZoneComputer.ZoneComputer_Id

EffectiveRoleAssignment_Hierarchical View

This view lists all effective role assignments in hierarchical zones for each user and for each computer.

Column Name	Description	Refers to
ADUser_GUID	The object GUID of the AD user which the user profile referring to.	ADUsers.ADUser_GUID
Assigned_Location	The source assignment location
Assigned_LocationType	The type of the source assignment location 1 – Zone 2 – Computer 3 – Computer Role
Assigned_LocationType_Desc	The display value of the source assignment location
Role_GUID	The object GUID ID of the role	Roles.Role_Id
RoleAssignment_GUID	The object GUID of the role assignment	RoleAssignments.RoleAssignment_GUID
RoleAssignment_EndTime	The end date and time for the role assignment.
RoleAssignment_StartTime	The start date and time for the role assignment.
Trustee_Id	The trustee ID of the role assignment
Trustee_Name	The trustee name of the role assignment
Trustee_Type	The trustee type ID of the role assignment	TrusteeTypes.TrusteType_Id
Trustee_Type_Desc	The type description of the trustee
ZoneComputer_Id	The object GUID ID of the computer profile	ZoneComputer.ZoneComputer_Id

EffectiveRolePrivileges_Computer View

This view lists the consolidated role assignments, logon privileges, system rights privileges for each computer. This view does not expand the trustee to individual Active Directory users.

Column Name	Description	Refers to
ADComputer_CanonicalName	The canonical name of the AD Computer in where the privileges effective
ADComputer_CnName	The Cn name of the AD Computer in where the privileges effective
ADComputer_DnsHostName	The dns host name of the AD Computer in where the privileges effective
ADComputer_ObjectName	The object name of the AD Computer in where the privileges effective
Assigned_Location	The name of the assignment location
Assigned_LocationType	The type of the assignment location 1 – Zone, 2 – Computer, 3 – Computer Role
Assigned_LocationTypeDesc	The description fo the type of the assignment location (Zone, Computer, Computer Role)
Computer_Platform	The platform ID of the AD Computer in where the privileges effective 1 – Windows, 2 – UNIX
Computer_Platform_Desc	The platform description name of the AD Computer in where the privileges effective (Windows/UNIX)
EffectiveZone_Id	The ID of the effective zone for the privilege assignment	Zones.Zone_Id
EffectiveZone_Name	The name of the effective zone for the privilege assignment
Right_Description	The description of the right.
Right_FullName	The full name of the right
Right_Grants_Logon	If this right could support a user to logon to a system 1 – Yes, 0 – No
Right_GUID	The GUID of the right	Rights.Right_GUID
Right_Name	The name of the right
Right_Platform	The platform ID of the right 0 – Windows, 1 – UNIX, 2 – Windows/UNIX
Right_Platform_Desc	The platform description of the right (Windows, UNIX, Windows/UNIX)
Right_Type	The type ID of the right	RightType.RightTypeId
Right_Type_Desc	The type description of the right
Role_FullName	The full name of the role <role name>/<zone name>
Role_GUID	The GUID of the role	Roles.Role_Id
Role_Name	The name of the role
RoleAssignment_GUID	The object GUID of the role assignment	RoleAssignments.RoleAssignment_GUID
Trustee_GUID	The GUID of the Trustee	Trustee_Type = 1: ADUsers.ADUser_GUID Trustee_Type = 2: ADGroups.ADGroup_GUID
Trustee_Name	The name of the trustee
Trustee_Type	The type ID of the trustee type	TrusteeTypes.TrusteeType_Id
Trustee_Type_Desc	The type description of the trustee type
ZoneComputer_Id	The ID of the Zone Computer in where the privileges effective	ZoneComputer.ZoneComputer_Id

EffectiveSysRights View

This view lists the effective system rights in hierarchical zones for each user and for each computer.

Column Name	Description	Refers to
ADUser_GUID	The object GUID of the AD user which the user profile referring to.	ADUsers.ADUser_GUID
ZoneComputer_Id	The object GUID ID of the computer profile	ZoneComputer.ZoneComputer_Id
-Audit-Level	The role’s audit level (It will be null for classic zone’s role) 0 – audit not required, 1 – audit if possible, 2 – audit required
AuditLevel_Desc	The display value of Role_AuditLevel (It will be null for classic zone’s role) (Audit not Required/Audit if Possible/Audit required)
Always-Permit-Logon	(It will be null for classic zone’s role) 1 – always permit, 0 – not always permit
AlwaysPermitLogon_Desc	The display value of -Always-Permit-Logon (It will be null for classic zone’s role) (Always permit/Not always permit)
AllowPasswordLogon	Allow Password Logon 0 – No, 1 – Yes, Null – N/A
AllowPasswordLogon_Desc	The display value of AllowPasswordLogon (No, Yes, N/A)
AllowPsRemoteAccess	Allow PowerShell remote access 0 - No, 1- Yes, Null - N/A
AllowPsRemoteAccess_Desc	The display value of AllowPsRemoteAccess (No, Yes, N/A)
AllowNonPasswordLogon	Allow Non Password Logon 0 – No, 1 – Yes, Null – N/A
AllowNonPasswordLogon_Desc	The display value of AllowNonPasswordLogon (No, Yes, N/A)
AllowConsoleLogon	Allow Console Logon 0 – No, 1 – Yes, Null – N/A
AllowConsoleLogon_Desc	The display value of AllowConsoleLogon (No, Yes, N/A)
AllowRemoteLogon	Allow Remote Logon 0 – No, 1 – Yes, Null – N/A
AllowRemoteLogon_Desc	The display value of AllowRemoteLogon (No, Yes, N/A)
HasVisibleRight	Has Visible Right 0 – No, 1 – Yes, Null – N/A
HasVisibleRight_Desc	The display value of HasVisibleRight (No, Yes, N/A)
IgnoreDisabled	If this user has ‘ignore disabled’ right on this computer 0 – No, 1 – Yes, Null – N/A
IgnoreDisabled_Desc	The display value of IgnoreDisabled (No, Yes, N/A)

EffectiveUserPrivileges_Computer View

The EffectiveUserPrivileges_Computer view lists consolidated role assignments, logon privileges, and system rights’ privileges for each user and computer.

Column Name	Description	Refers to
ADComputer_CanonicalName	The canonical name of the computer
ADComputer_CnName	The Active Directory computer’s common name.
ADComputer_DnsHostName	The DNS host name of the computer
ADComputer_ObjectName	The object name of the computer, in the format of <computer CN>.<computer domain>.
ADUser_CanonicalName	The canonical name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_FullName	The full name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_GUID	The GUID of the assigned Active Directory user. It will be null when trustee type = 7	ADUsers.ADUser_GUID
ADUser_Name	The name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_ObjectName	The display name for the Active Directory user, formatted as <user samAccountName>@<domain name>.
ADUser_SamAccountName	The samAccount name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_Upn	The upn name of the assigned Active Directory user. It will be null when trustee type = 7
Assigned_Location	The name of the source assignment location. It might be the zone name, computer dns host name or Computer Role name, depends on the location type
Assigned_LocationType	The type of the source assignment location 1 – Zone 2 – Computer 3 – Computer Role
Assigned_LocationTypeDesc	The display value of the source assignment location Zone Computer Computer Role
Effective_AllowConsoleLogon	If this user has ‘console logon’ right on this computer 0 – No, 1 – Yes, Null – N/A
Effective_AllowLogon	If this user can logon this computer
Effective_AllowNonPasswordLogon	If this user has ‘non password logon’ right on this computer 0 – No, 1 – Yes, Null – N/A
Effective_AllowNonRestrictedShell	If this user has ‘non restricted Shell’ right on this computer 0 – No, 1 – Yes, Null – N/A
Effective_AllowPasswordLogon	If this user has ‘password logon’ right on this computer 0 – No, 1 – Yes, Null – N/A
Effective_AllowPsRemoteAccess	If this user has the 'PowerShell Remote Access' right on this computer 0 - No; 1 - Yes; Null - N/A
Effective_AllowRemoteLogon	If this user has ‘remote logon’ right on this computer 0 – No, 1 – Yes, Null – N/A
Effective_AuditLevel	The human readable text of the effective audit level for this user on this computer 0 – Audit not required, 1 –Audit if possible, 2 – Audit required
Effective_CloudAuthorizationRequired	If this user has ‘Cloud authorization required’ right on this computer 0 – No, 1 – Yes, Null – N/A
Effective_HasRescueRight	If this role grants ‘rescue’ right to this user on this computer 0 – No, 1 – Yes
Effective_HasVisibleRight	Specifies if the user is visible on this computer
Effective_IgnoreDisabled	If this user has ‘ignore disabled’ right on this computer 0 – No, 1 – Yes, Null – N/A
EffectiveZone_Id	The ID of the effective zone for the privilege assignment	Zones.Zone_Id Zones_Hierarchical.Zone_Id
EffectiveZone_Name	The name of the effective zone for the privilege assignment
Grants_AuditLevel	If this role grants the effective Audit level 0 – Audit not required, 1 – Audit if possible, 2 – Audit required Given the Effective AuditLevel is 0 If this roles’s AuditLevel equals to the Effective Audit Level, then this column is 1 – Yes, Otherwise, 0 -- No
Grants_CloudAuthorizationRequired	If this role grants ‘Cloud authorization required’ right to this user on this computer 0 – No, 1 – Yes, Null – N/A
Grants_ConsoleLogon	If this role grants ‘console logon’ right to this user on this computer 0 – No, 1 – Yes, Null – N/A
Grants_HasVisibleRight	Specifies if the role grants the visible right to this user on this computer.
Grants_IgnoreDisabled	If this role grants ‘ignore disabled’ right to this user on this computer 0 – No, 1 – Yes, Null – N/A
Grants_Logon	If this role grants logon
Grants_NonPasswordLogon	If this role grants ‘non password logon’ right to this user on this computer 0 – No, 1 – Yes, Null – N/A
Grants_NonRestrictedShell	If this role grants ‘non restricted Shell’ right to this user on this computer 0 – No, 1 – Yes, Null – N/A
Grants_PasswordLogon	If this role grants ‘password logon’ right to this user on this computer 0 – No, 1 – Yes, Null – N/A
Grants_PsRemoteAcccess	If this role grants the 'PowerShell Remote Access' right to this user on this computer 0 - No; 1 - Yes; Null - N/A
Grants_RemoteLogon	If this role grants ‘remote logon’ right to this user on this computer 0 – No, 1 – Yes, Null – N/A
Grants_RescueRight	If this user has ‘rescue’ right on this computer 0 – No, 1 – Yes
Right_FullName	The full name of the right. Format in <Right name> / <Right’s zone name>
Right_GUID	The GUID of the right	Rights.Right_GUID
Right_Name	The name of the right
Right_Platform	Whether the right applies to windows, unix or both.
Right_Platform_Desc	The display value of the right platform
Right_Type	The ID of the right type	RightType.RightTypeId
Right_Type_Desc	The display value of the right type (see RightTypes view)
Role_FullName	The full name of the role. Format in <Role name> / <Role’s zone name>
Role_GUID	The GUID of the role	Roles.Role_Id
Role_Name	The name of the role
RoleAssignment_GUID	The object GUID of the role assignment	RoleAssignments.RoleAssignment_GUID
Trustee_Id	The GUID of the trustee	Trustee_Type = 1: ADUsers.ADUser_GUID Trustee_Type = 2: ADGroups.ADGroup_GUID
Trustee_Name	The name of the trustee
Trustee_Type	The type of the trustee 1 – Active Directory users 2 – Active Directory groups 7 – All Active Directory users
Trustee_Type_Desc	The display value of the trustee Active Directory users Active Directory groups All Active Directory users
ZoneComputer_Id	The zone computer ID	ZoneComputer.ZoneComputer_Id

EffectiveUserPrivileges_ComputerRole_UNIX View

The EffectiveUserPrivileges_ComputerRole_UNIX view lists effective computer role level role assignments for each user. This view assumes that all computers within the computer role are UNIX computers. The assigned Active Directory users must have at least one completed profile in the zone where the computer role is defined. Assignee “All Active Directory users” will be expanded to Active Directory users.

Column Name	Description	Refers to
ADUser_CanonicalName	The canonical name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_FullName	The full name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_GUID	The GUID of the assigned Active Directory user. It will be null when trustee type = 7	ADUsers.ADUser_GUID
ADUser_Name	The name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_ObjectName	The general display value for the Active Directory use in the default report. The format is <Active Directory samAccountName>@<domain name>.
ADUser_SamAccountName	The samAccount name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_Upn	The upn name of the assigned Active Directory user. It will be null when trustee type = 7
Assigned_Location	The name of the source assignment location. For this view, it will be always the Computer Role name
Assigned_LocationType	The type of the source assignment location 3 – Computer Role
Assigned_LocationTypeDesc	The display value of the source assignment location Computer Role
EffectiveZone_Id	The ID of the effective zone for the privilege assignment	Zones.Zone_Id Zones_Hierarchical.Zone_Id
EffectiveZone_Name	The name of the effective zone for the privilege assignment
Right_FullName	The full name of the right. Format in <Right name> / <Right’s zone name>
Right_GUID	The GUID of the right	Rights.Right_GUID
Right_Name	The name of the right
Right_Platform	The ID of the right platform
Right_Platform_Desc	The display value of the right platform
Right_Type	The ID of the right type	RightType.RightTypeId
Right_Type_Desc	Whether this right is for Unix, Windows or both
Role_FullName	The full name of the role. Format in <Role name> / <Role’s zone name>
Role_GUID	The GUID of the role	Roles.Role_Id
Role_Name	The name of the role
RoleAssignment_GUID	The object GUID of the role assignment	RoleAssignments.RoleAssignment_GUID
RoleAssignment_EndTime	The end date and time for the role assignment.
RoleAssignment_StartTime	The start date and time for the role assignment.
Trustee_Id	The GUID of the trustee	If Trustee_Type = 1: ADUsers.ADUser_GUID If Trustee_Type = 2: ADGroups.ADGroup_GUID
Trustee_Name	The name of the trustee
Trustee_Type	The type of the trustee 1 – Active Directory users 2 – Active Directory groups 7 – All Active Directory users	TrusteeTypes.TrusteeType_Id
Trustee_Type_Desc	The display value of the trustee Active Directory users Active Directory groups All Active Directory users

EffectiveUserPrivileges_ComputerRole_Windows View

The EffectiveUserPrivileges_ComputerRole_Windows view lists effective computer role level role assignments for each user. This view assumes that all computers within the computer role are Windows computers. Assignee “All Active Directory users” are NOT expanded to Active Directory users.

Column Name	Description	Refers to
ADUser_CanonicalName	The canonical name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_FullName	The full name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_GUID	The GUID of the assigned Active Directory user. It will be null when trustee type = 7	ADUsers.ADUser_GUID
ADUser_Name	The name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_ObjectName	The general display value for the Active Directory use in the default report. The format is <Active Directory samAccountName>@<domain name>.
ADUser_SamAccountName	The samAccount name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_Upn	The upn name of the assigned Active Directory user. It will be null when trustee type = 7
Assigned_Location	The name of the source assignment location. For this view, it will be always the Computer Role name
Assigned_LocationType	The type of the source assignment location 3 – Computer Role
Assigned_LocationTypeDesc	The display value of the source assignment location Computer Role
EffectiveZone_Id	The ID of the effective zone for the privilege assignment	Zones.Zone_Id Zones_Hierarchical.Zone_Id
EffectiveZone_Name	The name of the effective zone for the privilege assignment
Right_FullName	The full name of the right. Format in <Right name> / <Right’s zone name>
Right_GUID	The GUID of the right	Rights.Right_GUID
Right_Name	The name of the right
Right_Platform	The ID of the right platform
Right_Platform_Desc	The display value of the right platform
Right_Type	The ID of the right type	RightType.RightTypeId
Right_Type_Desc	Whether this right is for Unix, Windows or both
Role_FullName	The full name of the role. Format in <Role name> / <Role’s zone name>
Role_GUID	The GUID of the role	Roles.Role_Id
Role_Name	The name of the role
RoleAssignment_GUID	The object GUID of the role assignment	RoleAssignments.RoleAssignment_GUID
RoleAssignment_EndTime	The end date and time for the role assignment.
RoleAssignment_StartTime	The start date and time for the role assignment.
Trustee_Id	The GUID of the trustee	If Trustee_Type = 1: ADUsers.ADUser_GUID If Trustee_Type = 2: ADGroups.ADGroup_GUID
Trustee_Name	The name of the trustee
Trustee_Type	The type of the trustee 1 – Active Directory users 2 – Active Directory groups 7 – All Active Directory users	TrusteeTypes.TrusteeType_Id
Trustee_Type_Desc	The display value of the trustee Active Directory users Active Directory groups All Active Directory users

EffectiveUserPrivileges_Zone_UNIX View

The EffectiveUserPrivileges_Zone view lists effective zone level role assignments for each user. This view assumes that all computers in the zone are UNIX computers. The assigned Active Directory users must have at least one completed profile in the zone. Assignee “All Active Directory users” is expanded to Active Directory users.

Column Name	Description	Refers to
ADUser_CanonicalName	The canonical name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_FullName	The full name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_GUID	The GUID of the assigned Active Directory user. It will be null when trustee type = 7	ADUsers.ADUser_GUID
ADUser_Name	The name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_ObjectName	The display value for the Active Directory in the default report. The format is <Active Directory samAccountName>@<domain name>.
ADUser_SamAccountName	The samAccount name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_Upn	The upn name of the assigned Active Directory user. It will be null when trustee type = 7
Assigned_Location	The name of the the source assignment location. For this view, it will be always the same as the EffectiveZone_Name
Assigned_LocationType	The type of the source assignment location 1 – Zone
Assigned_LocationTypeDesc	The display value of the source assignment location Zone
EffectiveZone_Id	The ID of the effective zone for the privilege assignment	Zones.Zone_Id
EffectiveZone_Name	The name of the effective zone for the privilege assignment
Right_FullName	The full name of the right. Format in <Right name> / <Right’s zone name>
Right_GUID	The GUID of the right	Rights.Right_GUID
Right_Name	The name of the right
Right_Platform	Whether this right is for Unix, Windows or both
Right_Platform_Desc	The display value of the right platform
Right_Type	The ID of the right type	RightType.RightTypeId
Right_Type_Desc	The display value of the right type
Role_FullName	The full name of the role. Format in <Role name> / <Role’s zone name>
Role_GUID	The GUID of the role	Roles.Role_Id
Role_Name	The name of the role
RoleAssignment_GUID	The object GUID of the role assignment	RoleAssignments.RoleAssignment_GUID
RoleAssignment_EndTime	The end date and time for the role assignment.
RoleAssignment_StartTime	The start date and time for the role assignment.
Trustee_Id	The GUID of the trustee	if Trustee_Type = 1: ADUsers.ADUser_GUID If Trustee_Type = 2: ADGroups.ADGroup_GUID
Trustee_Name	The name of the trustee
Trustee_Type	The type of the trustee 1 – Active Directory users 2 – Active Directory groups 7 – All Active Directory users	TrusteeTypes.TrusteeType_Id
Trustee_Type_Desc	The display value of the trustee: Active Directory users Active Directory groups All Active Directory users

EffectiveUserPrivileges_Zone_Windows View

This view lists the effective role assignments for each user, assuming that all computers within the zone are Windows computers. Assignee “All Active Directory users” is NOT expanded to Active Directory users.

Column Name	Description	Refers to
ADUser_CanonicalName	The canonical name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_FullName	The full name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_GUID	The GUID of the assigned Active Directory user. It will be null when the trustee type = 7	ADUsers.ADUser_GUID
ADUser_Name	The name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_ObjectName	The display value for the Active Directory in the default report. The format is <Active Directory samAccountName>@<domain name>.
ADUser_SamAccountName	The samAccount name of the assigned Active Directory user. It will be null when trustee type = 7
ADUser_Upn	The UPN name of the assigned Active Directory user. It will be null when trustee type = 7
Assigned_Location	The name of the the source assignment location. For this view, it will be always the same as the EffectiveZone_Name
Assigned_LocationType	The type of the source assignment location 1 – Zone
Assigned_LocationTypeDesc	The display value of the source assignment location Zone
EffectiveZone_Id	The ID of the effective zone for the privilege assignment	Zones.Zone_Id
EffectiveZone_Name	The name of the effective zone for the privilege assignment
Right_FullName	The full name of the right. Format in <Right name> / <Right’s zone name>
Right_GUID	The GUID of the right	Rights.Right_GUID
Right_Name	The name of the right
Right_Platform	Whether this right is for Unix, Windows or both
Right_Platform_Desc	The display value of the right platform
Right_Type	The ID of the right type	RightType.RightTypeId
Right_Type_Desc	The display value of the right type
Role_FullName	The full name of the role. Format in <Role name> / <Role’s zone name>
Role_GUID	The GUID of the role	Roles.Role_Id
Role_Name	The name of the role
RoleAssignment_GUID	The object GUID of the role assignment	RoleAssignments.RoleAssignment_GUID
RoleAssignment_EndTime	The end date and time for the role assignment.
RoleAssignment_StartTime	The start date and time for the role assignment.
Trustee_Id	The GUID of the trustee	if Trustee_Type = 1: ADUsers.ADUser_GUID If Trustee_Type = 2: ADGroups.ADGroup_GUID
Trustee_Name	The name of the trustee
Trustee_Type	The type of the trustee 1 – Active Directory users 2 – Active Directory groups 7 – All Active Directory users	TrusteeTypes.TrusteeType_Id
Trustee_Type_Desc	The display value of the trustee: Active Directory users Active Directory groups All Active Directory users

EffectiveZoneGroups View

The EffectiveZoneGroups view lists effective group profiles for each computer and zone.

Column Name	Description	Refers to
ZoneGroup_ADGroupGUID	The object GUID of the Active Directory group which the group profile referring to.	ADGroups.GUID
ZoneGroup_AssignmentLocation_GUID	The object GUID of the assignment location
ZoneGroup_AssignmentLocation_Name	The name of the assignment location
ZoneGroup_AssignmentLocation_Type	The type code of the assignment location type 1 – Zone, 2 – Computer
ZoneGroup_AssignmentLocation_TypeDesc	(zone/Computer)
ZoneGroup_Gid	The GID of the group profile
ZoneGroup_Id	The auto generated ID of the group profile	ZoneGroups.ZoneGroup_Id
ZoneGroup_Name	The UNIX name of the group
ZoneGroup_ZoneComputerId	The ID of the computer where the group profile is effective	ZoneComputers.ZoneComputer_Id
ZoneGroup_ZoneId	The ID of the zone where the group profile is defined	Zones.Zone_Id

EffectiveZoneLocalGroupMembers View

This view lists the effective local group members for each computer and zone.

Column Name	Description	Refers to
ZoneLocalGroup_ZoneId	The ID of the zone where the local group profile under	Zones.Zone_Id
ZoneLocalGroup_ZoneComputerId	The ID of the computer profile where the local group profile effective in	ZoneComputers.ZoneComputer_Id
ZoneLocalGroup_Name	The UNIX name of the local group
ZoneLocalGroup_MemberName	The name of the local group’s member
ZoneLocalGroup_AssignmentLocation_Type	The type code of the assignment location type 1 – Zone, 2 – Computer
ZoneLocalGroup_AssignmentLocation_TypeDesc	(zone/Computer)
ZoneLocalGroup_AssignmentLocation_GUID	The object GUID of the assignment location
ZoneLocalGroup_AssignmentLocation_Name	The name of the assignment location

EffectiveZoneLocalGroups View

This view lists the effective local group profiles for each computer and zone.

Column Name	Description	Refers to
ZoneLocalGroup_Id	The auto generated ID of the local group profile	ZoneLocalGroups.ZoneLocalGroup_Id
ZoneLocalGroup_ZoneId	The ID of the zone where the local group profile under	Zones.Zone_Id
ZoneLocalGroup_ZoneComputerId	The ID of the computer profile where the local group profile effective in	ZoneComputers.ZoneComputer_Id
ZoneLocalGroup_Name	The UNIX name of the group
ZoneLocalGroup_Gid	The GID of the local group profile
ZoneLocalGroup_ProfileState	The profile state of the local group profile 1 = Enabled, 3 = Removed from /etc/group
ZoneLocalGroup_ProfileState_Desc	The display value for ZoneLocalGroup_ProfileState (Enabled/Removed from /etc/group)
ZoneLocalGroup_IsCompleteProfile	To indicate if this profile was a complete profile 1 – Yes, 0 - No
ZoneLocalGroup_IsCompleteProfile_Desc	The description to the ZoneLocalGroup_IsCompleteProfile (Yes/No)
ZoneLocalGroup_AssignmentLocation_Type	The type code of the assignment location type 1 – Zone, 2 – Computer
ZoneLocalGroup_AssignmentLocation_TypeDesc	(zone/Computer)
ZoneLocalGroup_AssignmentLocation_GUID	The object GUID of the assignment location
ZoneLocalGroup_AssignmentLocation_Name	The name of the assignment location

EffectiveZoneLocalUsers View

This view lists the effective local user profiles for each computer and zone.

Column Name	Description	Refers to
ZoneLocalUser_Id	The auto generated ID of the local user profile	ZoneLocalUsers.ZoneLocalUser_Id
ZoneLocalUser_ZoneId	The ID of the zone where the local user profile under	Zones.Zone_Id
ZoneLocalUser_ComputerProfileId	The name of the zone where the local user profile under	ZoneComputers.ZoneComputer_Id
ZoneLocalUser_HomeDirectory	The local user profile’s home directory
ZoneLocalUser_Name	The local user profile’s unix name
ZoneLocalUser_PrimaryGroupId	The local user profile’s primary group id
ZoneLocalUser_PrimaryGroupName	The local user profile’s primary group name
ZoneLocalUser_GECOS	The local user profile’s GECOS
ZoneLocalUser_Shell	The local user profile’s shell
ZoneLocalUser_Uid	The local user profile’s UID
ZoneLocalUser_ProfileState	The profile state of the local user 1= Enabled, 2 = Disabled, 3 = Removed from /etc/passwd
ZoneLocalUser_ProfileState_Desc	The display value for ZoneLocalUser_ProfileState (Enabled/Disabled/Removed from /etc/passwd)
ZoneLocalUser_IsCompleteProfile	To indicate if this profile was a complete profile 1 – Yes, 0 - No
ZoneLocalUser_IsCompleteProfile_Desc	The description to the ZoneLocalUser_ IsCompleteProfile (Yes/No)
ZoneLocalUser_AssignmentLocation_Type	The type code of the location where the zoned user is assigned
ZoneLocalUser_AssignmentLocation_TypeDesc	The display text of the type of the location where the zoned local user is assigned
ZoneLocalUser_AssignmentLocation_GUID	The GUID of the location object where the zoned local user is assigned
ZoneLocalUser_AssignmentLocation_Name	The name of the location object where the zoned local user is assigned

EffectiveZoneLocalWinGroupMembers View

This view lists the effective local Windows group members for each computer and zone.

Column Name	Description	Refers to
ZoneLocalGroup_ZoneId	The ID for the zone that contains the local Windows group profile	Zones.Zone_Id
ZoneLocalGroup_ZoneComputerId	The ID of the computer profile where the local Windows group profile is effective	ZoneComputers.ZoneComputer_Id
ZoneLocalGroup_Name	The name of the local Windows group
ZoneLocalGroup_MemberName	The name of the local Windows group's member
ZoneLocalGroup_AssignmentLocation_Type	The type code of the assignment location type 1 – Zone, 2 – Computer
ZoneLocalGroup_AssignmentLocation_TypeDesc	The display value for ZoneLocalGroup_AssignmentLocation_Type (zone/Computer)
ZoneLocalGroup_AssignmentLocation_GUID	The object GUID of the assignment location
ZoneLocalGroup_AssignmentLocation_Name	The name of the assignment location

EffectiveZoneLocalWinGroups Views

This view lists the effective local Windows group profiles for each computer and zone.

Column Name	Description	Refers to
ZoneLocalGroup_Id	The auto-generated ID of the local Windows group profile	ZoneLocalGroups.ZoneLocalGroup_Id
ZoneLocalGroup_ZoneId	The ID of the zone that contains the local Windows group profile	Zones.Zone_Id
ZoneLocalGroup_ZoneComputerId	The ID of the computer profile where the local Windows group profile is effective	ZoneComputers.ZoneComputer_Id
ZoneLocalGroup_Name	The name of the local Windows group
ZoneLocalGroup_Description	The description of the local Windows group
ZoneLocalGroup_ProfileState	The profile state of the local Windows group profile 1 = Enabled, 3 = Removed
ZoneLocalGroup_ProfileState_Desc	The display value for ZoneLocalGroup_ProfileState (Enabled/Removed)
ZoneLocalGroup_AssignmentLocation_Type	The type code of the assignment location type 1 – Zone, 2 – Computer
ZoneLocalGroup_AssignmentLocation_TypeDesc	The display value for ZoneLocalGroup_AssignmentLocation_Type(zone/Computer)
ZoneLocalGroup_AssignmentLocation_GUID	The object GUID of the assignment location
ZoneLocalGroup_AssignmentLocation_Name	The name of the assignment location

EffectiveZoneLocalWinUsers View

This view lists the effective local Windows user profiles for each computer and zone.

Column Name	Description	Refers to
ZoneLocalUser_Id	The auto-generated ID of the local windows user profile	ZoneLocalUsers.ZoneLocalGroup_Id
ZoneLocalUser_ZoneId	The ID of the zone that contains the local Windows user profile	Zones.Zone_Id
ZoneLocalUser_ComputerProfileId	The ID of the computer profile where the local Windows user profile is effective	ZoneComputers.ZoneComputer_Id
ZoneLocalUser_Name	The name of the local Windows user
ZoneLocalUser_FullName	The full name of the local Windows user
ZoneLocalUser_PasswordOption	The password option of the local Windows user
ZoneLocalUser_Description	The description of the local Windows user
ZoneLocalUser_ProfileState	The profile state of the local Windows user profile 1 = Enabled, 2 = Disabled, 3 = Removed
ZoneLocalUser_ProfileState_Desc	The display value for ZoneLocalUser_ProfileState (Enabled/Disabled/Removed)
ZoneLocalUser_AssignmentLocation_Type	The type code of the assignment location type 1 – Zone, 2 – Computer
ZoneLocalUser_AssignmentLocation_TypeDesc	The display value for ZoneLocalUser_AssignmentLocation_Type (zone/Computer)
ZoneLocalUser_AssignmentLocation_GUID	The object GUID of the assignment location
ZoneLocalUser_AssignmentLocation_Name	The name of the assignment location

EffectiveZoneUsers View

The EffectiveZoneUsers view lists effective user profiles for each computer and zone,

Column Name	Description	Refers to
ZoneUser_ADUserGUID	The object GUID of the Active Directory user which the user profile referring to.	ADUsers.ADUser_GUID
ZoneUser_AssignmentLocation_GUID	The GUID of the location object where the zoned user is assigned
ZoneUser_AssignmentLocation_Name	The name of the location object where the zoned user is assigned
ZoneUser_AssignmentLocation_Type	The type code of the location where the zoned user is assigned
ZoneUser_AssignmentLocation_TypeDesc	The display text of the type of the location where the zoned user is assigned
ZoneUser_ComputerProfileId	The name of the zone computer where the user profile is effective	ZoneComputers.ZoneComputer_Id
ZoneUser_GECOS	The user profile’s GECOS
ZoneUser_HomeDirectory	The user profile’s home directory
ZoneUser_Id	The auto generated ID of the user profile	ZoneUsers.ZoneUser_Id
ZoneUser_IsCompleteProfile	To indicate if this profile was a complete profile 1 – Yes, 0 - No
ZoneUser_IsCompleteProfile_Desc	The description string for ZoneUser_ IsCompleteProfile (Yes/No)
ZoneUser_IsEnabled	To indicate if this profile was enabled. Only available to classic zone’s profile. For hierarchical zone profile, it will always be null 1 – Yes, 0 - No
ZoneUser_IsEnabled_Desc	The description string for ZoneUser_ IsEnabled (Yes/No)
ZoneUser_IsOrphan	1 – It is an orphan user profile. 0 – It is not an orphan profile 1 – Yes, 0 - No
ZoneUser_IsOrphan_Desc	The description to the ZoneUser_ IsOrphan (Yes/No)
ZoneUser_IsSecondaryProfile	To indicate if this profile was a secondary profile 1 – Yes, 0 - No
ZoneUser_IsSecondaryProfile_Desc	The description string for ZoneUser_IsSecondaryProfile (Yes/No)
ZoneUser_Name	The user profile’s unix name
ZoneUser_PrimaryGroupId	The user profile’s primary group id
ZoneUser_PrimaryGroupName	The user profile’s primary group name
ZoneUser_Shell	The user profile’s shell
ZoneUser_Uid	The user profile’s uid
ZoneUser_ZoneId	The ID of the zone where the user profile under	Zones.Zone_Id

Rights View

The Rights view lists all rights and system rights defined for each zone.

Column Name	Description	Refers to
Grants_Logon	Specifies whether the right allows a user to log on to a computer.
Right_-Description	The description of the right
Right_-Full-Name	The full name of the right. The format of the full name is: Right_-Name/Right_ZoneName
Right_-GUID	The object GUID of the right
Right_-Type	The ID of the right type 1 – Network Access right 2 – Desktop right 3 – Application right 4 – PAM Access right 5 – SSH right 6 – Command right 7 – Restricted Environment 101 – Allow password logon 102 – Allow non password logon 103 – Ignore disabled 104 – Allow non restricted shell 105 – Allow console logon 106 – Allow remote logon 107 – Always permit logon 108 – Audit level – Not required 109 – Audit level – If possible 110 – Audit level – Required 111 – Cloud Authorization Required	RightType.RightTypeId
Right_Type_Desc	The display value of the right type: Network Access right Desktop right Application right PAM Access right SSH right Command right Restricted Environment Allow password logon Allow non password logon Ignore disabled Allow non restricted shell Allow console logon Allow remote logon Always permit logon Audit level – Not required Audit level – If possible Audit level – Required Cloud Authorization Required
Right_ZoneId	The zone ID of the right. It will be null for system rights	Zones.Zone_Id
Right_-ZoneName	The zone name of the right. It will be null for system rights

Rights columns used in other views

Column name	Referred from other view
Rights.Right_GUID	EffectiveUserPrivileges_Computer.Right_GUID EffectiveUserPrivileges_ComputerRole.Right_GUID EffectiveUserPrivileges_Zone.Right_GUID

RightType View

The RightType view provides the type of rights that are defined in the zone and what operating system platform the type applies to.

Column Name	Description
Grants_Logon	Specifies if the right can support a user to log on to a system. 0 – No 1 – Yes
RightPlatformId	The platform ID of the right type 0 – Unix 1 – Windows 2 – Unix/Windows
RightTypeDesc	The display value of the right type
RightTypeId	The ID of the right type

RightType columns used in other views

Column name	Referred from other view
RightType.RightTypeId	EffectiveUserPrivileges_Computer.Right_Type EffectiveUserPrivileges_ComputerRole.Right_Type EffectiveUserPrivileges_Zone.Right_Type Rights.Right_Type ZoneRolePrivileges.ZoneRolePrivileges_RightType

RoleAssignmentCustomAttribute View

This view lists the role assignment’s custom attributes.

Column Name	Description	Refers to
Role_Id	The role’s object GUID.	Roles.Role_Id
CustomAttribute_Name	The custom attribute’s name.
CustomAttribute_Value	The custom attribute’s value.

RoleAssignments View

This view lists the role assignments, based on zones, computer roles, or computers.

Column Name	Description	Refers to
RoleAssignment_EndTime	The end date and time for the role assignment.
RoleAssignment_GUID	The object GUID of the role assignment
RoleAssignment_StartTime	The start date and time for the role assignment.
RoleAssignment_ZoneId	The ID of the zone where the role assignment belongs to	Zones.Zone_Id
RoleAssignment_ZoneName	The name of the zone where the role assignment belongs to
RoleAssignment_ZoneDomainId	The ID of the domain where the role assignment belongs to	Domains.Id
Assigned_Location	The name of the location where the role assignment is created
Assigned_LocationType	The type of the location where the role assignment was created 1 - Zone , 2 - Computer, 3 - Computer Role
Assigned_LocationType_Desc	The type description of the location where the role assignment was created 1 - Zone , 2 - Computer, 3 - Computer Role
RoleAssignment_TrusteeName	The name of the trustee
RoleAssignment_TrusteeType	The type of the trustee 1 - AD user 2 - AD group 3 - Local UNIX user 4 - Local UNIX group 5 - Local Windows user 6 - Local Windows group 7 - All AD users 8 - All UNIX user 9 - All Windows users
RoleAssignment_TrusteeType_Desc	The type description of the trustee
RoleAssignment_RoleGUID	The object GUID of the assigned role	Roles.Role_Id
RoleAssignment_RoleName	The name of the assigned role
RoleAssignment_RoleFullName	The full name of the assigned role
RoleAssignment_Description	The description of the role assignment

RoleAssignments_Computer View

This view lists the role assignments defined for computers.

Column Name	Description	Refers to
RoleAssignment_EndTime	The end date and time for the role assignment.
RoleAssignment_GUID	The object GUID of the role assignment
RoleAssignment_ZoneComputerId	The ID of the zone computer where the role assignment is defined	ZoneComputers.ZoneComputer_Id
RoleAssignment_ADComputer_ObjectName	The name of the zone computer where the role assignment is defined
RoleAssignment_ADComputer_CnName	The Active Directory computer's CN name of the zone computer where the role assignment is defined
RoleAssignment_ADComputer_CanonicalName	The Active Directory computer's canonical name of the zone computer where the role assignment is defined
RoleAssignment_ADComputer_DnsHostName	The Active Directory computer's Dns host name name of the zone computer where the role assignment is defined
RoleAssignment_StartTime	The start date and time for the role assignment.
Computer_Platform	The platform of the zone computer where the role assignment is defined 1 - Windows 2 - UNIX	.
Computer_Platform_Desc	The platform description of the zone computer where the role assignment is defined 1 - Windows 2 - UNIX
RoleAssignment_ZoneId	The ID of the zone where the role assignment belongs	Zones.Zone_Id
RoleAssignment_ZoneName	The name of the zone where the role assignment belongs
RoleAssignment_ZoneDomainId	The ID of the domain where the role assignment belongs	Domains.Id
RoleAssignment_TrusteeName	The name of the trustee
RoleAssignment_TrusteeType	The type of the trustee 1 - AD user 2 - AD group 3 - Local UNIX user 4 - Local UNIX group 5 - Local Windows user 6 - Local Windows group 7 - All AD users 8 - All UNIX user 9 - All Windows users
RoleAssignment_TrusteeType_Desc	The type description of the trustee .
RoleAssignment_RoleGUID	The object GUID of the assigned role	Roles.Role_Id
RoleAssignment_RoleName	The name of the assigned role
RoleAssignment_RoleFullName	The full name of the assigned role
RoleAssignment_Description	The role assignment description

RoleAssignments_ComputerRole View

The RoleAssignments_Computer Role view lists the role assignments for each computer role.

Column Name	Description	Refers to
RoleAssignment_ComputerRoleDescription	The description of the Compute Role
RoleAssignment_ComputerRoleGUID	The GUID of the Computer Role
RoleAssignment_ComputerRoleName	The name of the Computer Role
RoleAssignment_Description	The description of the role assignment
RoleAssignment_EndTime	The end date and time for the role assignment.
RoleAssignment_GUID	The object GUID of the role assignment
RoleAssignment_RoleFullName	The effective end time of the role assignment
RoleAssignment_RoleGUID	The GUID of the assigned role	Roles.Role_Id
RoleAssignment_RoleName	The object GUID of the role that is being assigned
RoleAssignment_StartTime	The start date and time for the role assignment.
RoleAssignment_TrusteeName	The trustee name of the role assignment
RoleAssignment_TrusteeType	The trustee type code of the role assignment 1 – Active Directory user 2 – Active Directory group 3 – Local UNIX user 4 – Local UNIX group 5 – Local Windows user 6 – Local Windows group 7 – All Active Directory users 8 – All UNIX user 9 – All Windows users
RoleAssignment_TrusteeType_Desc	The display value of the trustee type: Active Directory user Active Directory group Local UNIX user Local UNIX group Local Windows user Local Windows group All Active Directory users All UNIX user All Windows users
RoleAssignment_ZoneDomainId	The zone’s domain ID of the role assignment	Domains.Id
RoleAssignment_ZoneId	The zone ID of the role assignment	Zones.Zone_Id

RoleAssignments_Zone View

This view lists the role assignments defined in zones.

Column Name	Description	Refers to
RoleAssignment_EndTime	The end date and time for the role assignment.
RoleAssignment_GUID	The object GUID of the role assignment
RoleAssignment_StartTime	The start date and time for the role assignment.
RoleAssignment_ZoneId	The ID of the zone where the role assignment belongs	Zones.Zone_Id
RoleAssignment_ZoneName	The name of the zone where the role assignment belongs
RoleAssignment_ZoneDomainId	The id of the domain where the role assignment belongs	Domains.Id
RoleAssignment_TrusteeName	The name of the trustee
RoleAssignment_TrusteeType	The type of the trustee 1 - AD user 2 - AD group 3 - Local UNIX user 4 - Local UNIX group 5 - Local Windows user 6 - Local Windows group 7 - All AD users 8 - All UNIX user 9 - All Windows users
RoleAssignment_TrusteeType_Desc	The type description of the trustee
RoleAssignment_RoleGUID	The object GUID of the assigned role	Roles.Role_Id
RoleAssignment_RoleName	The name of the assigned role
RoleAssignment_RoleFullName	The full name of the assigned role
RoleAssignment_Description	The description of the role assignment

RoleCustomAttribute View

This view lists the computer role’s custom attributes.

Column Name	Description	Refers to
RoleAssignment_GUID	The role assignment’s object GUID.	RoleAssignments.RoleAssignment_GUID
CustomAttribute_Name	The custom attribute’s name.
CustomAttribute_Value	The custom attribute’s value.

RoleRights View

This view lists the rights for each role.

Column Name	Description	Refers to
Role_GUID	The object GUID ID of the role	Roles.Role_Id
Role_-Name	The name of the role
Role_-Full-Name	The full name of the role. The format of the full name is: <Role_Name>/<Role_ZoneName>
Right_GUID	The object GUID of the right	Rights.Right_Id
Right_-Name	The zone name of the right. It will be null for system rights.
Right_-Full-Name	The full name of the right. The format of the full name is: Right_-Name/Right_ZoneName
Right_ZoneId	The zone ID of the right. This column is null for system rights.	Zones.Zone_Id
Right_-Type	The ID of the right type 1 – Network Access right 2 – Desktop right 3 – Application right 4 – PAM Access right 5 – SSH right 6 – Command right 7 – Restricted Environment 101 – Allow password logon 102 – Allow non password logon 103 – Ignore disabled 104 – Allow non restricted shell 105 – Allow console logon 106 – Allow remote logon 107 – Always permit logon 108 – Audit level – Not required 109 – Audit level – If possible 110 – Audit level – Required 111 – Cloud Authorization Required	RightType.RightTypeId
Right_Type_Desc	The display value of the right type: Network Access right Desktop right Application right PAM Access right SSH right Command right Restricted Environment Allow password logon Allow non password logon Ignore disabled Allow non restricted shell Allow console logon Allow remote logon Always permit logon Audit level – Not required Audit level – If possible Audit level – Required Cloud Authorization Required
Right_-Description	The description of the right
Right_Platform	The platform ID of the right 0 – Windows, 1 – UNIX, 2 – Windows/UNIX
Right_Platform_Desc	The platform description of the right (Windows, UNIX, Windows/UNIX)
Right_Grants_Logon	If this right could support a user to logon to a system 1 – Yes, 0 – No

Roles View

The Roles view lists all roles for each zone. This view is a combined view of the Roles_Classic and Roles_Hierarchical views.

Column Name	Description	Refers to
Role_-Always-Permit-Logon	(It will be null for classic zone’s role) 1 – always permit, 0 – not always permit
Role_AlwaysPermitLogon_Desc	The display value of _-Always-Permit-Logon (It will be null for classic zone’s role) (Always permit/Not always permit)
Role_-Audit-Level	The role’s audit level (It will be null for classic zone’s role) 0 – audit not required, 1 – audit if possible, 2 – audit required
Role_AuditLevel_Desc	The display value of Role_AuditLevel (It will be null for classic zone’s role) (Audit not Required/Audit if Possible/Audit required)
Role_-Description	The description of the role
Role_-Full-Name	The full name of the role. The format of the full name is: <Role_Name>/<Role_ZoneName>
Role_-Id	The object GUID of the role
Role_-Name	The name of the role
Role_-Zone-Id	The ID of the zone where the role is defined	Zones.Zone_Id
Role_ZoneName	The name of the zone where the role is defined

Roles Columns Used in Other Views

Column name	Referred from other view
Roles.Right_GUID	ZoneRolePrivileges.ZoneRolePrivileges_RightGUID
Roles.Role_Id	EffectiveUserPrivileges_Computer.Role_GUID EffectiveUserPrivileges_ComputerRole.Role_GUID EffectiveUserPrivileges_Zone.Role_GUID RoleAssignments_ComputerRole.RoleAssignment_RoleGUID ZoneRolePrivileges.ZoneRolePrivileges_RoleGUID

Roles_Classic View

The Roles_Classic view lists all roles for each classic zone.

Column Name	Description	Refers to
Role_-Always-Permit-Logon	(It will be null for classic zone’s role) It is NULL in this view as Audit Level is not applicable in classic zone
Role_AlwaysPermitLogon_Desc	The display value of Role_-Always-Permit-Logon (It will be null for classic zone’s role) It is NULL in this view as Audit Level is not applicable in classic zone
Role_-Audit-Level	The role’s audit level (It will be null for classic zone’s role) It is NULL in this view as Audit Level is not applicable in classic zone
Role_AuditLevel_Desc	The display value of Role_AuditLevel (It will be null for classic zone’s role) It is NULL in this view as Audit Level is not applicable in classic zone
Role_-Description	The description of the role
Role_-Full-Name	The full name of the role. The format of the full name is: <Role_Name>/<Role_ZoneName>
Role_-Id	The object GUID of the role
Role_-Name	The name of the role
Role_-Zone-Id	The ID of the zone where the role is defined	Zones.Zone_Id
Role_ZoneName	The name of the zone where the role is defined

Roles_Hierarchical View

The Roles_Hierarchical view lists all roles for each hierarchical zone.

Column Name	Description	Refers to
Role_-Always-Permit-Logon	1 – always permit, 0 – not always permit
Role_AlwaysPermitLogon_Desc	The display value of Role_-Always-Permit-Logon (Always permit/Not always permit)
Role_-Audit-Level	The role’s audit level 0 – audit not required, 1 – audit if possible, 2 – audit required
Role_AuditLevel_Desc	The display value of Role_AuditLevel (Audit not Required/Audit if Possible/Audit required)
Role_-Description	The description of the role
Role_-Full-Name	The full name of the role. The format of the full name is: <Role_Name>/<Role_ZoneName>
Role_-ID	The object ID of the role
Role_-Name	The name of the role
Role_-Zone-Id	The ID of the zone where the role is defined	Zones.Zone_Id
Role_ZoneName	The name of the zone where the role is defined

TrusteeTypes View

This view lists the role assignment trustee types.

Column Name	Description	Refers to
TrusteeType_Id	The type ID of the trustee
TrusteeType_Desc	The type description of the trustee

Zone_Classic View

The Zones_Classic view lists all Classic zones.

Column Name	Description	Refers to
Zone_AvailableShells	Zone’s Available shells
Zone_CanonicalName	The canonical name of the Zone
Zone_DefaultGroup	Zone’s default group
Zone_DefaultHomeDirectory	Zone’s default home directory
Zone_DefaultPrimaryGroupId	The default primary group
Zone_DefaultPrimaryGroupName	The name of the default primary group
Zone_DefaultShell	Zone’s default shell
Zone_DomainId	The name of the domain which the Active Directory user belongs to	Domains.Id
Zone_DomainName	The ID of the domain which the Active Directory user belongs to
Zone_Id	The auto generated ID of the Zone
Zone_IsHierarchical	If the zone was a Hierarchical zone or not 1 – Is Hierarchical Zone, 0 – Classic Zone
Zone_IsHierarchical_Desc	The display value for Zone_IsHierarchical (Yes/No)
Zone_IsSFU	If the zone was a SFU zone or not 1 – SFU Zone, 0 – Non SFU Zone
Zone_IsSFU_Desc	(Yes/No)
Zone_Name	The name of the Zone
Zone_NextGID	Zone’s next gid
Zone_NextUID	Zone’s next uid
Zone_NISDomain	Zone’s NIS domain
Zone_ReservedGID	Zone’s reserved gid
Zone_ReservedUID	Zone’s reserved uid
Zone_SFUDomain	Zone’s SFU domain

Zone_Hierarchical View

The Zones_Hierarchical view lists all Hierarchical zones.

Column Name	Description	Refers to
Zone_AvailableShells	Zone’s Available shells
Zone_CanonicalName	The canonical name of the Zone
Zone_DefaultGroup	Zone’s default group
Zone_DefaultHomeDirectory	Zone’s default home directory
Zone_DefaultPrimaryGroupId	The default primary group
Zone_DefaultPrimaryGroupName	The name of the default primary group
Zone_DefaultShell	Zone’s default shell
Zone_DomainId	The name of the domain which the Active Directory user belongs to	Domains.Id
Zone_DomainName	The ID of the domain which the Active Directory user belongs to
Zone_Id	The auto generated ID of the Zone
Zone_IsHierarchical	If the zone was a Hierarchical zone or not 1 – Is Hierarchical Zone, 0 – Classic Zone
Zone_IsHierarchical_Desc	The display value for Zone_IsHierarchical 1 – Yes, 0 - No
Zone_IsSFU	If the zone was a SFU zone or not 1 – SFU Zone, 0 – Non SFU Zone
Zone_IsSFU_Desc	1 – Yes, 0 - No
Zone_Name	The name of the Zone
Zone_NextGID	Zone’s next gid
Zone_NextUID	Zone’s next uid
Zone_NISDomain	Zone’s NIS domain
Zone_ReservedGID	Zone’s reserved gid
Zone_ReservedUID	Zone’s reserved uid
Zone_SFUDomain	Zone’s SFU domain
Zone_TrustedCloudInstanceUrl	Trusted cloud instance URL

Zones_Hierarchical Columns Used in Other Views

Column name	Referred from other view
Zones_Hierarchical.Zone_Id	EffectiveUserPrivileges_Computer.EffectiveZone_Id EffectiveUserPrivileges_Computer.ZoneUser_Id EffectiveUserPrivileges_ComputerRole.EffectiveZone_Id

ZoneComputers View

The ZoneComputers view lists computer profiles for each zone.

Column Name	Description	Refers to
ZoneComputer_ADComputerCnName	The Active Directory computer’s common name.
ZoneComputer_ADComputerDnsHostName	The Active Directory computer’s DNS hostname
ZoneComputer_ADComputerDomainId	The domain ID of the Active Directory computer which is managed by the zone
ZoneComputer_ADComputerId	The object GUID of the Active Directory computer which is managed by the zone	ADComputers.ADComputer_GUID
ZoneComputer_ADComputerName	The name of the Active Directory computer which is managed by the zone
ZoneComputer_ADComputerObjectName	The object name of the computer, in the format of <computer CN>.<computer domain>.
ZoneComputer_AgentVersion	The agent version of the managed computer
ZoneComputer_ComputerType	The type of the managed computer 1 – Windows, 2 – Unix
ZoneComputer_ComputerType_Desc	The display value of the ZoneComputer_ComputerType (Windows/Unix)
ZoneComputer_Id	The object GUID of the computer profile
ZoneComputer_IsHierarchical	1 – It is managed by a hierarchical zone, 0 – It is managed by a classic zone
ZoneComputer_IsHierarchical_Desc	The display value of the ZoneComputer_IsHierarchical (Yes/No)
ZoneComputer_IsOrphan	1 – It is an orphan profile, 0 – It is not an orphan profile
ZoneComputer_IsOrphan_Desc	The display value of the ZoneComputer_IsOrphan (Yes/No)
ZoneComputer_IsZoned	If the computer joined zone 1 – Joined zone, 0 – Only has machine overrides
ZoneComputer_JoinDate	The date when the managed computer joined zone (UTC time)
ZoneComputer_LicenseType	Specifies the type of computer license. 1 - Server, 2-Workstation, 3-UNIX, 4-Express
ZoneComputer_LicenseType_Desc	The description of the license type.
ZoneComputer_Name	The name of the managed computer
ZoneComputer_PreferredSite	The preferred site of the computer.
ZoneComputer_PreferredSubnetSite	The preferred subnet site of the computer.
ZoneComputer_ZoneDomainId	The domain ID of the zone by which the computer is managed
ZoneComputer_ZoneId	The ID of the zone by which the computer managed	Zones.Zone_Id
ZoneComputer_ZoneName	The name of the zone by which the computer managed

ZoneComputer Columns Used in Other Views

Column name	Referred from other view
ZoneComputer.ZoneComputer_Id	EffectiveUserPrivileges_Computer.ZoneComputer_Id EffectiveZoneGroups.ZoneGroup_ZoneComputerId EffectiveZoneUsers.ZoneUser_ComputerProfileId

ZoneGroups View

The ZoneGroups view lists group profiles for each zone.

Column Name	Description	Refers to
ZoneGroup_-ADGroup-GUID	The object GUID of the Active Directory group which the group profile referring to.	ADGroups.GUID
ZoneGroup_ADGroupName	The name of the Active Directory group which the user profile referring to.
ZoneGroup_-Gid	The group profile’s gid
ZoneGroup_-Id	The auto generated ID of the group profile
ZoneGroup_IsOrphan	If the zone group referencing to a valid Active Directory group 1 – It is an orphan user profile. 0 – It is not an orphan profile
ZoneGroup_IsOrphan_Desc	The display value for ZoneGroup_IsOrphan 1 – Yes, 0 – No
ZoneGroup_-Name	The group profile’s name
ZoneGroup_-Zone-Id	The ID of the zone where the group profile is defined	Zones.Zone_Id
ZoneGroup_ZoneName	The name of the zone where the group profile is defined

ZoneGroup Columns Used in Other Views

Column name	Referred from other view
ZoneGroups.ZoneGroup_Id	EffectiveUserPrivileges_Computer.ZoneComputer_Id EffectiveZoneGroups.ZoneGroup_ZoneComputerId EffectiveZoneUsers.ZoneUser_ComputerProfileId

ZoneHierarchy View

Column Name	Description	Refers to
ParentZone_Id	The ID of the parent zone.	Zones.Zone_Id
ParentZone_Name	The name of the parent zone.
ParentZone_DomainID	The domain ID of the parent zone.	Domains.Id
ChildZone_Id	The ID of the child zone.	Zones.Zone_Id
ChildZone_Name	The name of the child zone.
ChildZone_DomainId	The domain ID of the child zone.	Domains.Id

ZoneLocalGroupMembers View

This view lists the local group members for each zone.

Column Name	Description	Refers to
ZoneLocalGroup_-Id	The auto generated ID of the local group profile
ZoneLocalGroup_-Zone-Id	The ID of the zone where the local group profile is	Zones.Zone_Id
ZoneLocalGroup_ZoneName	The name of the zone where the local group profile is
ZoneLocalGroup_-Name	The local group profile’s name
ZoneLocalGroup_MemberName	The name of the local group’s member

ZoneLocalGroups View

This view lists the local group profiles for each zone.

Column Name	Description	Refers to
ZoneLocalGroup_-Id	The auto generated ID of the local group profile
ZoneLocalGroup_-Zone-Id	The ID of the zone where the local group profile is	Zones.Zone_Id
ZoneLocalGroup_ZoneName	The name of the zone where the local group profile is
ZoneLocalGroup_-Gid	The local group profile’s GID
ZoneLocalGroup_-Name	The local group profile’s name
ZoneLocalGroup_ProfileState	The profile state of the local group profile 1 = Enabled, 3 = Removed from /etc/group
ZoneLocalGroup_ProfileState_Desc	The display value for ZoneLocalGroup_ProfileState (Enabled/Removed from /etc/group)

ZoneLocalUsers View

This view lists the local user profiles for each zone.

Column Name	Description	Refers to
ZoneLocalUser_Id	The auto generated ID of the local user profile
ZoneLocalUser_ZoneId	The ID of the zone where the local user profile is	Zones.Zone_Id
ZoneLocalUser_ZoneName	The name of the zone where the local user profile is
ZoneLocalUser_Name	The local user profile’s UNIX name
ZoneLocalUser_HomeDirectory	The local user profile’s home directory
ZoneLocalUser_PrimaryGroupID	The local user profile’s primary group ID
ZoneLocalUser_PrimaryGroupName	The local user profile’s primary group name
ZoneLocalUser_IsHierarchical	If the zone user was defined in a hierarchical zone or not 1 – It is defined in a hierarchical zone. 0 – Is is defined in a classic zone
ZoneLocalUser_IsHierarchical_Desc	The display value for ZoneLocalUser_IsHierarchical (Yes/No)
ZoneLocalUser_Shell	The shell of the zone user
ZoneLocalUser_GECOS	The GECOS of the zone user
ZoneLocalUser_Uid	The zone user’s uid
ZoneLocalUser_ProfileFlag	The profile state of the local user 1 means Enabled, 2 means Disabled, 3 means Removed from /etc/passwd
ZoneLocalUser_ProfileFlag_Desc	The display value for ZoneLocalUser_ProfileState (Enabled/Disabled/Removed from /etc/passwd)

ZoneLocalWinGroupMembers View

This view lists the local Windows group members for each zone.

Column Name	Description	Refers to
ZoneLocalGroup_Id	The auto-generated ID of the local Windows group profile
ZoneLocalGroup_ZoneId	The ID of the zone that contains the local Windows group profile	Zones.Zone_Id
ZoneLocalGroup_ZoneName	The name of the zone that contains the local Windows group profile
ZoneLocalGroup_Name	The local Windows group profile’s name
ZoneLocalGroup_MemberName	The name of the local Windows group’s member

ZoneLocalWinGroups View

This view lists the local Windows group profiles for each zone.

Column Name	Description	Refers to
ZoneLocalGroup_Id	The auto-generated ID of the local Windows group profile
ZoneLocalGroup_ZoneId	The ID of the zone that contains the local Windows group profile	Zones.Zone_Id
ZoneLocalGroup_ZoneName	The name of the zone that contains the local Windows group profile
ZoneLocalGroup_Name	The local Windows group profile’s name
ZoneLocalGroup_ProfileState	The profile state of the local Windows group profile 1 = Enabled, 3 = Removed
ZoneLocalGroup_ProfileState_Desc	The display value for ZoneLocalGroup_ ProfileState (Enabled/Removed)

ZoneLocalWinUsers View

This view lists the local Windows user profiles for each zone.

Column Name	Description	Refers to
ZoneLocalUser_Id	The auto generated ID of the local Windows user profile
ZoneLocalUser_ZoneId	The ID of the zone where the local Windows user profile is	Zones.Zone_Id
ZoneLocalUser_ZoneName	The name of the zone where the local Windows user profile is
ZoneLocalUser_Name	The local Windows user profile’s name
ZoneLocalUser_IsHierarchical	If the zone user was defined in a hierarchical zone or not 1 – It is defined in a hierarchical zone. 0 – It is defined in a classic zone
ZoneLocalUser_IsHierarchical_Desc	The display value for ZoneLocalUser_IsHierarchical (Yes/No)
ZoneLocalUser_FullName	The full name of the local Windows user
ZoneLocalUser_Description	The description of the local Windows user
ZoneLocalGroup_ProfileFlag	The profile state of the local Windows user profile 1 = Enabled, 2 = Disabled, 3 = Removed
ZoneLocalGroup_ProfileFlag_Desc	The display value for ZoneLocalUser_ ProfileState (Enabled/Disabled/Removed)

ZoneRolePrivileges View

The ZoneRolePrivileges view lists the roles that are defined for each zone and the rights that are granted by each of these roles.

Column Name	Description	Refers to
ZoneRolePrivileges_RightFullName	The full name of the right
ZoneRolePrivileges_RightGUID	The GUID of the right	Roles.Right_GUID
ZoneRolePrivileges_RightName	The name of the right
ZoneRolePrivileges_RightPlatform	Whether the right is for Unix, Windows or both
ZoneRolePrivileges_RightPlatform_Desc	The display value of the right platform
ZoneRolePrivileges_RightType	The type ID of the right	RightType.RightTypeId
ZoneRolePrivileges_RightType_Desc	The display value of the right’s type
ZoneRolePrivileges_RightZoneDomainId	The domain ID of the zone of the right	Domains.Id
ZoneRolePrivileges_RightZoneId	The zone ID of the right	Zones.Zone_Id
ZoneRolePrivileges_RightZoneIsHierarchical	If the zone of the right is hierarchical 1 – Yes, 0 – No
ZoneRolePrivileges_RightZoneIsHierarchical_Desc	The display value of the ZoneRolePrivileges_RightZoneIsHierarchical (Yes/No)
ZoneRolePrivileges_RightZoneName	The zone name of the right
ZoneRolePrivileges_RoleFullName	The full name of the role
ZoneRolePrivileges_RoleGUID	The GUID of the role	Roles.Role_Id
ZoneRolePrivileges_RoleName	The name of the role
ZoneRolePrivileges_RoleZoneDomainId	The domain ID of the zone of the domain
ZoneRolePrivileges_RoleZoneId	The zone ID of the role	Zones.Zone_Id
ZoneRolePrivileges_RoleZoneIsHierarchical	If the zone of the role is hierarchical 1 – Yes, 0 – No
ZoneRolePrivileges_RoleZoneIsHierarchical_Desc	The display value of the ZoneRolePrivileges_RoleZoneIsHierarchical (Yes/No)
ZoneRolePrivileges_RoleZoneName	The zone name of the role

Zones View

The Zones view lists all the zones in the domain. This view is a combination of both Zones_Classic and Zones_Hierarchical.

Column Name	Description	Refers to
Zone_AvailableShells	Zone’s Available shells
Zone_CanonicalName	The canonical name of the Zone
Zone_DefaultGIDType	The ID of the default GID type 1—Use the auto-incremented GID 2—Use the generated GID from the SID 3—Use the Apple GID scheme
Zone_DefaultGIDType_Desc	The description of the default GID type (Use auto-incremented GID, Generated GID from SID, or Use Apple GID scheme)
Zone_DefaultGroup	Zone’s default group
Zone_DefaultHomeDirectory	Zone’s default home directory
Zone_DefaultPrimaryGroupId	The default primary group
Zone_DefaultPrimaryGroupName	The name of the default primary group
Zone_DefaultShell	Zone’s default shell
Zone_DefaultUIDType	The ID of the default UID type (applies to hierarchical zones only) 1—Use auto-incremented UID 2—Generated UID from SID 3—Use Apple UID scheme
Zone_DefaultUIDType_Desc	The description of the default type. For hierarchical zones, this is one of the following: Use auto-incremented UID, Generated UID from SID, or Use Apple UID scheme. For classic zones: Use auto-incremented UID.
Zone_DefaultUserName	The description of the zone scheme ID, such as Standard, RFC 2307, or SFU.
Zone_DomainId	The name of the domain which the Active Directory user belongs to	Domains.Id
Zone_DomainName	The ID of the domain which the Active Directory user belongs to
Zone_Id	The auto generated ID of the Zone
Zone_IsHierarchical	If the zone was a Hierarchical zone or not 1 – Is Hierarchical Zone, 0 – Classic Zone
Zone_IsHierarchical_Desc	If the zone was a Hierarchical zone or not (Yes/No)
Zone_IsSFU	If the zone was a SFU zone or not 1 – SFU Zone, 0 – Non SFU Zone
Zone_IsSFU_Desc	If the zone was a SFU zone or not (Yes/No)
Zone_Name	The name of the Zone
Zone_NextGID	Zone’s next gid
Zone_NextUID	Zone’s next uid
Zone_NISDomain	Zone’s NIS domain
Zone_ReservedGID	Zone’s reserved gid
Zone_ReservedUID	Zone’s reserved uid
Zone_Schema	The ID of the zone scheme: 1—Standard 2—RFC 2307 3—SFU
Zone_SFUDomain	Zone’s SFU domain
Zone_Type	The zone type (hierarchical or classic)
Zone_TrustedCloudInstanceUrl	Trusted cloud instance URL

Zone view columns used in other views

Column name

Referred from other view

Zone.Zone_Id

Roles_Classic.Role_ZoneId ComputerRoleMembership.ComputerRole_ZoneId ComputerRoleMembership.ZoneComputer_ZoneId EffectiveUserPrivileges_Computer.EffectiveZone_Id EffectiveUserPrivileges_ComputerRole.EffectiveZone_Id EffectiveUserPrivileges_Zone.EffectiveZone_Id EffectiveZoneGroups.ZoneGroup_ZoneId EffectiveZoneUsers.ZoneUSer_ZoneId Rights.Right_Id RoleAssignments_ComputerRole.RoleAssignment_ZoneId Roles.Role_ZoneId Roles_Hierarchical.Role_ZoneId ZoneComputers.ZoneComputer_ZoneId ZoneGroups.ZoneGroup_ZoneId ZoneRolePrivileges.ZoneRolePrivileges_RoleZoneId ZoneRolePrivileges.ZoneRolePrivileges_RightZoneId ZoneUsers.ZoneUser_ZoneId

ZoneUsers View

The ZoneUsers view lists the user profiles for each zones.

Column Name	Description	Refers to
ZoneUser_ADUserGUID	The object GUID of the Active Directory user which the user profile referring to.	ADUsers.ADUser_GUID
ZoneUser_ADUserName	The name of the Active Directory user which the user profile referring to.
ZoneUser_GECOS	The GECOS of the zone user
ZoneUser_HomeDirectory	The user profile’s home directory
ZoneUser_Id	The auto generated ID of the user profile
ZoneUser_IsHierarchical	If the zone user was defined in a hierarchical zone or not 1 – It is defined in a hierarchical zone. 0 – Is is defined in a classic zone
ZoneUser_IsHierarchical_Desc	The display value for ZoneUser_IsHierarchical (Yes/No)
ZoneUser_IsOrphan	If the zone user referencing to a valid Active Directory user 1 – It is an orphan user profile. 0 – It is not an orphan profile
ZoneUser_IsOrphan_Desc	The display value for ZoneUser_IsOrphan (Yes/No)
ZoneUser_IsSFU	If the zone user was defined in a SFU zone or not 1 – It is defined in a SFU zone. 0 – Is is not defined in a SFU zone
ZoneUser_IsSFU_Desc	The display value for ZoneUser_IsSFU (Yes/No)
ZoneUser_Name	The user profile’s unix name
ZoneUser_PrimaryGroupID	The user profile’s primary group id
ZoneUser_PrimaryGroupName	The user profile’s primary group name
ZoneUser_Shell	The shell of the zone user
ZoneUser_Uid	The zone user’s uid
ZoneUser_UserEnabled	If the zone user is enabled (For classic zone user only, it will be null for Hierarchical zone user) 1 – enabled, 0 – disabled, NULL – not applicable
ZoneUser_UserEnabled_Desc	(Yes/No)
ZoneUser_ZoneId	The ID of the zone where the user profile under	Zones.Zone_Id
ZoneUser_ZoneName	The name of the zone where the user profile under

ZoneUser Columns Used in Other Views

Column name	Referred from other view
ZoneUsers.ZoneUser_Id	EffectiveUserPrivileges_Computer.ZoneUser_Id EffectiveUserPrivileges_ComputerRole.ZoneUser_Id EffectiveUserPrivileges_Zone.ZoneUser_Id EffectiveZoneUsers.ZoneUser_Id