# Ignition Project Permissions Audit

**URL:** <https://forum.inductiveautomation.com/t/ignition-project-permissions-audit/103827>\
**Category:** General Discussion\
**Tags:** vision, perspective\
**Created:** [March 18, 2025, 11:53am UTC](https://forum.inductiveautomation.com/t/ignition-project-permissions-audit/103827 "2025-03-18T11:53:39Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![william.ivey](https://avatars.discourse-cdn.com/v4/letter/w/aca169/32.png) [@william.ivey](https://forum.inductiveautomation.com/u/william.ivey)\
**Post date:** [March 18, 2025, 11:53am UTC](https://forum.inductiveautomation.com/t/ignition-project-permissions-audit/103827/1 "2025-03-18T11:53:39Z")

</div>

I have a situation in which I have several projects at each site and several sites that need a project permissions audit/review. Short of opening each and every project, opening the Project properties, and reviewing Project permissions, Vision permissions, and Perspective permissions... is there any shortcut to gathering this information?

AI tools say that information should be in the config.idb in the project table, but the ones I've reviewed are all empty. Is there something I could do to force Ignition to populate those tables and review them from that angle?

Much appreciation in advance for any help.

---

<div class="post-metadata">

**Author:** ![paul-griffith](https://sea1.discourse-cdn.com/inductiveautomation/user_avatar/forum.inductiveautomation.com/paul-griffith/32/37249_2.png) [@paul-griffith](https://forum.inductiveautomation.com/u/paul-griffith)\
**Post date:** [March 18, 2025, 2:28pm UTC](https://forum.inductiveautomation.com/t/ignition-project-permissions-audit/103827/2 "2025-03-18T14:28:43Z")

</div>

AI's lying to you - since 8.0, all Ignition project data is stored on the filesystem as separate folders.

Of the three things you called out, two are managed by one `global-props` resource type, and one is managed by Perspective in a `session-props` resource. Both resources are opaque binary blobs of Java serialized data that can't be readily parsed by anything that's not Ignition, though they could technically be read by a script with sufficient effort.

---

<div class="post-metadata">

**Author:** ![william.ivey](https://avatars.discourse-cdn.com/v4/letter/w/aca169/32.png) [@william.ivey](https://forum.inductiveautomation.com/u/william.ivey)\
**Post date:** [March 18, 2025, 4:55pm UTC](https://forum.inductiveautomation.com/t/ignition-project-permissions-audit/103827/3 "2025-03-18T16:55:56Z")

</div>

Thanks for the information. If this still requires opening each project (even to run a script for review), then I'm just as good doing all the review manually, I would think.
