Set up FileAudit permissions

FileAudit permissions let you give specific users or groups access to console features without granting them full administrative rights. You decide, per account, which features are allowed or denied.

Before you start, make sure you have:

• The Configure permissions right in FileAudit.

• An existing Windows user or group to delegate access to.

1. In the Settings > Permissions view, click Add a user or Add a group.
   

   

2. In the Microsoft account selector, type the account name and click Check Names. Once the name is validated, click OK.
   

   

   
   

3. A panel opens on the right of the Permissions view. Set each feature to Allow or Deny for this user or group.
   
   

   

4. Save your changes. Denied features are immediately greyed out in the FileAudit hub for that account.
   
   

   

   
   

5. To confirm the result, sign in as the delegated user, or ask them to, and open the FileAudit hub. The tiles for any denied feature must appear disabled, and allowed features must be accessible.

For what each feature controls, see Permissions Reference.

If a user is unexpectedly denied a feature, check every account they belong to. FileAudit follows the same rule as Windows: a single Deny on any group overrides an Allow elsewhere. Full resolution logic is documented in Permissions Reference.