Assigning grid permissions
Use the BMC Atrium Orchestrator Grid Manager Administration tab to manage permissions. Before getting started, review the permissions overview in Managing-permissions.
In the Grid Manager Administration tab you can
- Create groups.
- Assign group access for workflow execution or grid administration.
This topic provides the following information:
In the Grid Manager, you can assign permissions to the group so that users assigned to the corresponding role/group can:
- See the Status tab
- See the Manage tab
- See the Admin tab
- Use BMC Atrium Orchestrator Development Studio with this grid and execute workflows
- Use a selected Operations Actions Management module
- Run a workflow in BMC Atrium Orchestrator Development Studio
Default grid permissions
The following table describes the default permissions available in Grid Manager.
Permission | Description |
|---|---|
View Grid Status | Users assigned to the role can see the Status tab to check the grid status |
Grid Management | Users assigned to the role can see the Manage tab and manage content. Members can add adapters, remove adapters, activate content on the grid. If you select the Grid Management check box, the View Grid Status check box is selected by default and is disabled. Members can manage content and see the status of the grid. |
Grid Administration | Users assigned to the role can perform grid administration activities, which includes managing content, adding groups, removing groups, and copying groups. If you select the Grid Administration check box, the Grid Management and View Grid Status check boxes are selected by default and are disabled. |
Development Studio | Users assigned to the role can access the BMC Atrium Orchestrator Development Studio and run workflows. |
Workflow execution permissions
When you activate a module on a grid, it is added to the Grid Permissions tab. All workflows inside the module appear in the permissions list. You can assign workflow execution permissions to the appropriate groups.
To create a group
Each group that you create must have a matching role (in Remedy SSO) or group (in LDAP or ASSO) of the same name.
- In the BMC Atrium Orchestrator Grid Manager application, select the Administration tab, and then select the Grid Permissions tab.
- Click Add Group.
- Enter the name of the group and click Save.
You can now assign permissions to the group.
To assign permissions to a group or remove them from a group
- Select the check box of each permission that you want to assign to the group or deselect it to remove a permission from a group.
You cannot modify permissions for the AoAdmin group.
See Default grid permissions table for details.
For example
To assign Grid Management permission for the TestA group, in the Grid Management row, select the option under TestA group.
To remove Grid Management permission for the TestA group, in the Grid Management row, deselect the option under TestA group. - Click OK to save the permission assignments.
To copy permissions from one group to another
- In the BMC Atrium Orchestrator Grid Manager application, select the Administration tab, and then select the Grid Permissions tab.
- In Copy From Existing Group, select the group from which you want to copy permissions, and then in Copy To Group Name enter the group name where you want the permissions to be copied.
You cannot a group's permissions to the AoAdmin group; in other words, you cannot overwrite the AoAdmin group. - Click Save.
To delete a group
- In the BMC Atrium Orchestrator Grid Manager application, select the Administration tab, and then select the Grid Permissions tab.
- Click Delete Group.
You cannot delete the AoAdmin group. - Select the group that you want to delete from the list and click Delete.
Related topics
Managing-permissions
Assigning-repository-permissions
Creating-and-managing-local-users-and-roles-in-Remedy-Single-Sign-On
Creating-user-accounts-and-assigning-user-accounts-to-groups-in-BMC-Atrium-Single-Sign-On