The single access group System Authorization report displays all work and process items expanded. This example shows one access group consisting of seven roles:

The second column of the report, Access Group, displays icons showing the access group's aggregate authorization value. In this example, all members of the access group PurchaseFW:Administrators have full access to all operations on instances of the Program Fund class.

The aggregate level of access is equivalent to the most permissive authorization granted to a role in the access group: in this example, System Administrator Level 4.

Use the access group aggregate values to determine whether authorizations for roles in the access group should be made more or less permissive.

Aggregate values for an access group indicate the following:

• — No operators in the access group can access the item.
• — All operators in the access group have full access to the item.
• — Combination of conditional and possibly "no access" among operators in the access group.

When one access group is selected, Access Manager displays this aggregate value to the left of each work and process item:

For more information on aggregate values, see Access Manager — Getting Started.