---
title: "Security diagnostics"
slug: "security-diagnostics"
abstract: "Use the security diagnostics tool to verify user permissions."
---
# Security diagnostics

> [!note]
> To configure Content Hub, you must either be a superuser or have the necessary permissions granted to you through [user group policies](https://doc.sitecore.com/ch/en/users/content-hub/user-group-policies.html "User group policies").

You can use the security diagnostics tool to determine the permissions that a specific user has for an entity (asset or content item). The tool takes into consideration both direct policies and indirect policies:

- Direct policy - permissions a user receives when they are added as a collaborator for the entity when a [collection](https://doc.sitecore.com/ch/en/users/content-hub/collections.html "Collections") is shared or a [project](https://doc.sitecore.com/ch/en/users/content-hub/project-types.html "Project types") planned.
- Indirect policy - permissions a user inherits from a [user group](https://doc.sitecore.com/ch/en/users/content-hub/standard-user-groups.html "Standard user groups").

To verify user permissions for an entity:

1. On the menu bar, click **Manage** :mdiCogOutline:.
2. On the **Manage** page, click **Security diagnostics**.
3. In the **Entity ID** field, enter the ID for the entity you want to verify.
4. Click :mdiPlus: **Choose user**.
5. In the **Choose user** dialog, search for and select the user you are interested in and click **Select**.
6. Click **Check**. A list of the permissions assigned to the user for the entity is displayed. If the user does not have permissions for the entity, the message "The selected user doesn't have any permissions on this entity." displays.