MGCLatticeDbAccessAdminPrivilege
HIGH-RISK. Grants the ability to vend just-in-time AxDB db_owner access: open the MGCLatticeDbAccessGrantManager maintenance form, invoke the MGCLatticeDbAccessService requestAccess/revokeAccess operations, and run the JIT access expiry batch. Holding this privilege confers full db_owner control over AxDB to whoever can call the service or use the form. Assign to as few administrators as possible and segregate from standard integration operations
- Object type: Privilege
Grants
| Object type | Object | Access |
|---|---|---|
| MenuItemDisplay | MGCLatticeDbAccessGrantManager | Full |
| ServiceOperation | MGCLatticeDbAccessService.requestAccess | Invoke |
| ServiceOperation | MGCLatticeDbAccessService.revokeAccess | Invoke |
| MenuItemAction | MGCLatticeDbAccessExpiry | Invoke |