John doesn't have the option to create new query in ePO - where would the Admin need to go to change access level to create a new query?

• A. Access Control > Users > John
• B. User Management > Permission Sets > [john's permission set] > queries and reports
• C. User Management > Permissions > John > queries and reports
• D. Identity Management > John > Permissions

Answer: (B)

In ePO, who can do something with a feature is controlled by permission sets, not just by the individual user. To let John create a new query, you adjust the rights in the permission set that is assigned to him. The admin should go to User Management, open Permission Sets, select John’s permission set, and then enable or grant the appropriate Create permission under Queries and Reports. This centralizes access control and is how ePO applies module-level permissions to users.

The other paths don’t fit because they don’t target the module-level permission for queries and reports in the same way, or they point to areas used for basic account management rather than configuring what John can do with queries. Identity Management isn’t where you set internal authorizations for creating queries.