# PeopleSoft Security

> Browse and audit PeopleSoft security configuration: permission lists, roles, and users.

---

Site [llms.txt](/llms.txt)

---

## Security

psLens browses PeopleSoft security read-only: permission lists, roles, and users. Use it to audit access without writing SQL against PSOPRDEFN, PSROLEUSER, and PSAUTHITEM. Changes still have to be made in PeopleSoft.

- **[Permission Lists](/docs/security/permission-lists/)** — The granular access settings that define menu, component, and page authorizations.
- **[Roles](/docs/security/roles/)** — Collections of permission lists assigned to users.
- **[Users](/docs/security/users/)** — User/operator accounts and their associated roles.
- **[Campus Solutions Security](/docs/security/campus-solutions/)** — Application-level row security governing academic structure, 3C groups, and student administrative domains.

### How Security Objects Relate

PeopleSoft security flows in one direction:

```text
User → Roles → Permission Lists → Menus/Components/Functions
```

When investigating access, work from the bottom up:

1. Start with the **permission list** that grants the specific access you're concerned about.
2. Find which **roles** include that permission list.
3. Find which **users** have those roles.

Or work from the top down:

1. Find the **user** whose access you want to understand.
2. Look at their **roles**.
3. Drill into each role to see its **permission lists**.

User detail pages link out to each role. Role pages link to permission lists and back to assigned users. You can follow an access chain in three clicks without writing a join.

<figure><img src="/images/screenshots/permlist-detail.png"
			alt="Permission List detail showing properties and menu authorizations"><figcaption>
			<p>Permission List detail view with properties, menu authorizations, and related data options</p>
		</figcaption>
</figure>

---

Section pages:

- [Permission Lists](/docs/security/permission-lists/): Permission lists (PSCLASSDEFN, sometimes called classes) are the lowest-level grantable security object.
- [Roles](/docs/security/roles/): Roles (PSROLEDEFN) are named bundles of permission lists. Users get roles, not permission lists directly.
- [Users](/docs/security/users/): Users (PSOPRDEFN, historically called operators) are login accounts.
- [Campus Solutions Security](/docs/security/campus-solutions/): Audit Campus Solutions row-level security grants across user defaults, academic structure, 3C groups, and administrative domain tables.