# Active Directory Permissions Analyzer Active Directory Permissions Analyzer is an Identity Governance and Administration product by Paramount Defenses. It runs on-premises. Pricing is commercial (contact sales). AD permissions audit tool for analyzing ACLs, access rights, and security principals. Listed April 2026. ## What is Active Directory Permissions Analyzer? Paramount Defenses Active Directory Permissions Analyzer is a specialized audit tool for analyzing security permissions in Active Directory (AD) environments. It was designed by a former Microsoft Program Manager for Active Directory Security. The tool automates the analysis of security permissions across Active Directory domains, enabling IT and security teams to identify who has what permissions, where those permissions exist, and which specific permissions are granted. Key capabilities include: - Identifying all security principals with any kind of permissions in Active Directory ACLs - Identifying all security principals with specific types of permissions (e.g., Allow/Deny, Explicit/Inherited) - Finding permissions granted to a specific user, computer, or group - Analyzing permissions based on schema classes, attributes, or extended rights - Applying custom LDAP filters to narrow analysis scope - Controlling scope depth for targeted or domain-wide analysis - Exporting analysis results to CSV The tool operates without requiring administrative privileges, agents, or services, and can be installed and run on any Windows computer. It is part of Paramount Defenses' Gold Finger product suite. Licensing is subscription-based, available on quarterly or annual terms. A free version is available for download. The tool is used by organizations including government agencies, financial institutions, and large enterprises. Tags: Active Directory, Permissions, Security Audit, Windows, RBAC, Least Privilege, Privilege Escalation, Microsoft, Security Reporting, Enumeration ## Where it fits in your security program (NIST CSF 2.0) - [Identify](https://cybersectools.com/guides/building-identify-program-small-team): helps you know your assets and your risks. - [Protect](https://cybersectools.com/guides/building-protect-program-small-team): helps you prevent attacks and keep data safe. ## Quick facts - Category: [IAM](https://cybersectools.com/categories/iam) · [Identity Governance and Administration](https://cybersectools.com/categories/iga) - Vendor: [Paramount Defenses](https://cybersectools.com/companies/paramount-defenses) - Deployment: On-Premises - Company size fit: SMB, Mid-Market, Enterprise - Pricing model: Commercial (contact sales) - Features: 10 listed - Website: paramountdefenses.com The full feature and integration lists are on the page for signed-in visitors. ## Where it ranks No shortlist covers this product's category yet. The closest is [Best IAM Solutions for Business](https://cybersectools.com/shortlists/best-iam-solutions). ## Active Directory Permissions Analyzer FAQ ### What is Active Directory Permissions Analyzer? Active Directory Permissions Analyzer is a product by Paramount Defenses in the Identity Governance and Administration category. It covers Active Directory, Permissions and Security Audit. ### What is the pricing for Active Directory Permissions Analyzer? Active Directory Permissions Analyzer is a commercial product. For pricing, visit https://www.paramountdefenses.com/products/active-directory-permissions-analyzer.html or contact Paramount Defenses. ### What are alternatives to Active Directory Permissions Analyzer? Alternatives to Active Directory Permissions Analyzer listed on CybersecTools: 1. [Corpia IGA](https://cybersectools.com/tools/corpia-iga) - IGA platform automating identity access provisioning across AD, ERP and Microsoft systems (Commercial) 2. [Provision® IAM for Banks](https://cybersectools.com/tools/provisionr-iam-for-banks) - Cloud-based IAM platform for community banks with automated provisioning. (Commercial) 3. [Elimity Identity Visibility & Intelligence Platform](https://cybersectools.com/tools/elimity-identity-visibility-and-intelligence-platform) - Unifies identity and access data across IT systems for visibility and governance (Commercial) 4. [One Identity Active Roles](https://cybersectools.com/tools/one-identity-active-roles) - Manages AD, Entra ID & M365 with delegation, automation & least privilege (Commercial) 5. [Opti Risk Mitigation](https://cybersectools.com/tools/opti-risk-mitigation) - AI-driven IAM risk mitigation with automated least privilege enforcement & JIT access. (Commercial) Compare all Active Directory Permissions Analyzer alternatives at [https://cybersectools.com/alternatives/active-directory-permissions-analyzer](https://cybersectools.com/alternatives/active-directory-permissions-analyzer) ### What deployment and organization size does Active Directory Permissions Analyzer fit? Active Directory Permissions Analyzer is available as on-premises software. It is listed for small businesses, mid-market companies and enterprises. Pricing is commercial. Ask Paramount Defenses for pricing and support terms. ## Compare Active Directory Permissions Analyzer with similar solutions - [Active Directory Permissions Analyzer vs Corpia IGA](https://cybersectools.com/compare/active-directory-permissions-analyzer-vs-corpia-iga) - [Active Directory Permissions Analyzer vs Provision® IAM for Banks](https://cybersectools.com/compare/active-directory-permissions-analyzer-vs-provisionr-iam-for-banks) - [Active Directory Permissions Analyzer vs Elimity Identity Visibility & Intelligence Platform](https://cybersectools.com/compare/active-directory-permissions-analyzer-vs-elimity-identity-visibility-and-intelligence-platform) All alternatives to Active Directory Permissions Analyzer: [/alternatives/active-directory-permissions-analyzer](https://cybersectools.com/alternatives/active-directory-permissions-analyzer) --- Source: https://cybersectools.com/tools/active-directory-permissions-analyzer For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL). More on Active Directory Permissions Analyzer and Paramount Defenses: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md