How to change permissions for an AEM site | Community
Skip to main content
T
trivenivelaga
Level 2
June 13, 2022

How to change permissions for an AEM site

  • June 13, 2022
  • 3 replies
  • 3912 views

The permissions changed on <server>/useradmin is reflecting on permissions block on AEM but it not reflecting on the site and pages.

how this issue can be solved?

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.

3 replies

Pallavi_Shukla_
Community Advisor
Pallavi_Shukla_Community Advisor
Community Advisor
June 13, 2022

hi @trivenivelaga 

 

Try to log out and check again ( maybe incognito ). Ideally, the change is reflected instantly- By the way what scenario you are trying to achieve here?

https://experienceleague.adobe.com/docs/experience-manager-64/administering/security/security.html?lang=en

    T
    trivenivelagaAuthor
    Level 2
    June 13, 2022

    Actually I change the permissions to deny for one page of site but it not reflecting on site i checked so many times.

     

      T
      trivenivelagaAuthor
      Level 2
      June 13, 2022

      Without getting into details, I suggest you a couple of milestones regarding the permissions management:

       

      1) the administrator user is the only one that can and must access everything with every possible operation. The administrator has even access the Felix OSGi console so do your math. Reducing its privileges is a nonsense. Moreover, I would not be surprised whether some permission comes as immutable and by default. The fact is that you start every brand new AEM instance with a predefined admin by default and the only thing you should do is to modify its password. So please, create instead an editorial group and work with it leaving the full permissions to the admin.

       

      2) The administrator user, among all the other things, is the only one that can "impersonate" the other users. In the old UI, in example the useradmin page, you can open the top-right menu and chose to impersonate another user to check if the permissions work properly.

      If I were you, I would create a new editorial group (or just a user), set its permissions and then I would verify it quickly by impersonating it.


      I tried your second point but i am getting error AEM is also not opening.

      what's the solution for above error?

      arunpatidar
      Community Advisor
      arunpatidarCommunity Advisor
      Community Advisor
      June 13, 2022

      Hi,

      If you are trying to deny permission for end user page then you need to add cug group

      https://experienceleague.adobe.com/docs/experience-manager-65/administering/security/cug.html?lang=en 

       

      Arun Patidar
        ShaileshBassi
        Community Advisor
        ShaileshBassiCommunity Advisor
        Community Advisor
        June 14, 2022

        Hi, 

         

        The permissions can be applied at the user level and as well at the group level.

         

        If you are applying for permissions at the group level and there is a deny permission at the user level, so user level will take precedence over here.

         

        So, the first recommendation would be to remove all the permission that you have applied to the environment. For that, you can refer to 

        Once done with the above, then apply for the permission at the respective content one by one and check if the things are reflecting correctly or not.

         

        You can also validate the same from http://localhost:4502/crx/explorer/index.jsp

         

         

        Thanks

        Terms & ConditionsAccessibility statement

        Loading footer...