As the use of access management increases, there is a growing need to display user permissions more clearly in message templates. This guide explains how to add detailed permission lists to your email notifications and how to insert a direct link that allows managers to modify these permissions.
Displaying User Permissions in Email Templates
You can use specific variables in the message template editor to automatically list a user's assigned permissions.
Displaying All Group Memberships
To show a list of all groups a user is a member of, use the following variable. This will display all groups registered in eAdm, regardless of whether they are synchronized to Active Directory (AD).
[HTMLLISTMEMBEROF; Description]
Displaying All System Roles and Access Rights
To show a comprehensive list of all roles assigned to a user, use the variable below. This list includes all roles, whether they are linked to AD groups, assigned via API, or are purely email-based.
[HTMLLISTARRAY; [OBJECTPERMISSION.SYSTEMROLE; Name;;*]]
Example Email Output
When the variables are used, a complete overview of a user's groups, licenses, and access rights will appear in the email, similar to the example below.
Security Groups and Licenses
-
Fagerstrand Kindergarten
-
Fagerstrand Kindergarten
-
Group with all users
-
User Type Education User with Microsoft 365-E3
-
Grants access to ACOS Websak on TS Intern
-
MFA for all employees
Note: For questions about licenses, please contact the IT department.
Business Systems and Access
-
Employee
-
ACOS Websak
-
Education User with Microsoft 365-A3
How to Add a Direct Link to Manage Permissions
You can empower department managers by providing them with a direct link to manage a user's permissions from within the email notification.
-
In the message template editor, write the desired link text. For example: "Click here to add, remove, or change permissions."
-
Highlight the text you just wrote and click the Insert link icon in the editor's toolbar.
-
In the URL field of the link configuration window, enter the following placeholder:
#leditpermission# -
(Recommended) Set the Target to open the link in a New window.
-
Click OK to create the link.
Note: This is an automatically generated email and cannot be replied to. Please contact the Helpdesk if the user is missing any necessary access.