Creating and managing local users and roles in Remedy Single Sign-On

Use the Remedy Single Sign-On (Remedy SSO or RSSO) console to create and manage BMC Atrium Orchestrator (BAO) local users and roles.

A BMC Atrium Orchestrator local user represents an individual user who will access BMC Atrium Orchestrator.

A BMC Atrium Orchestrator role represents the roles in your organization and is used to control user access to BMC Atrium Orchestrator components and content in the role-based access (RBAC) system. To use RBAC, you perform the following tasks:

• In Remedy SSO, create users for the individual users in your organization who will access BAO.
• In Remedy SSO, create the roles needed by your organization.
• In Remedy SSO, assign users to the appropriate roles.
• In Grid Manager and Repository Manager, assign appropriate access permissions to BMC Atrium Orchestrator components and content.
  For more information about permissions and assigning them to roles, see Managing permissions.

You perform the Remedy SSO user and role tasks in the Remedy Single Sign-On console from the Local User Management window.

This topic provides the following information:

Accessing the RSSO console Local User Management window

To log into the BMC Remedy Single Sign-On console and access the Local User Management window

1. From a web browser, enter the appropriate URL for the protocol that you are using:
   HTTPS: https:// <FullyQualifiedDomainName>:<RSSOWebServerPort>/rsso/admin
   HTTP:  http://<FullyQualifiedDomainName>:<RSSOWebServerPort>/rsso/admin
2. Log into the console.
   For default login credentials, see Installing the repository. 
3. Click Local User Management.

The following video (5:59) demonstrates how to create your BAO users and roles and add users to a role in Remedy SSO.

  https://youtu.be/D6RgSpT9dUg

Adding, searching for, editing, and deleting users

You can create, search for, modify, and delete users on the Users tab. You can also change user passwords on this tab.

To access the Users tab

In the RSSO Console's Local User Management window, click Users.

To add a user

1. In the Users tab, click Add User.

2. Provide information in the following fields (asterisk denotes a required field).

   Field	Description
   User Name	Enter the user's full name.
   Login Name	Enter the user's login name.
   Password	Enter the user's password. Ensure that you do not include spaces at the beginning or end of the password. Spaces are allowed between the first and last password characters.
   Description	Provide a description of the user.
   Enabled	Select this option to enable the user, allowing the user to log into RSSO and BAO.

3. Click Add.

To edit a user

1. In the Users tab, locate the user and click Edit in the Action column.
   If you disable the user and the user is currently logged into BAO, the user remains logged in.
2. Make your changes and click Save.

To delete a user

In the Users tab, locate the user, click Delete in the Action column, and confirm the deletion.

To change a user's password

1. In the Users tab, locate the user and click Change Password in the Action column.
2. Enter the new password, then enter again in the Confirm Password field.
   Ensure that you do not include spaces at the beginning or end of the password. Spaces are allowed between the first and last password characters. 
3. Click Change Password.

To search for a user

In the Users tab search field enter the search criteria using the following format and then click Search.
text=<searchText/*> AND enabled=<true/false/*>
The following table describes how to use the search criteria.

Adding, searching for, editing, and deleting roles

You can create, search for, modify, and delete roles on the Roles tab.

To access the Roles tab

In the RSSO Console's Local User Management window, click Roles.

To add a role

1. In the RSSO Console's Local User Management window, click Roles.

2. Click Add Role.

3. Provide information in the following fields (asterisk denotes a required field).

   Field	Description
   Role	Enter the role name.
   Description	Provide a description of the role.

4. Click Save Role.

To edit a role

1. In the RSSO Console's Local User Management window, click Roles.
2. Locate the role and click Edit in the Action column.
3. Make your changes and click Save.

To delete a role

1. In the RSSO Console's Local User Management window, click Roles.
2. Locate the role,click Delete in the Action column, and confirm the deletion.

To search for a role

1. In the RSSO Console's Local User Management window, click Roles.

2. In the search field enter the search text and then click Search.

   Search criteria

   Description

   <searchText>

   Enter a string to search on the value of one of the following fields: Role Name, Description. You can pass a partial search value enclosed in % to search for all users having the partial search value in the Role Name or Description field. Examples: BMC returns users with the exact value of "BMC" in one of the 2 fields. %BMC% returns users with "BMC" as a partial value, such as "BMCadmin" as Role Name.

Assigning users to roles and removing users from roles

You can add users to roles and remove them from roles on the Roles tab.

To add users to or remove users from a role

1. In the RSSO Console's Local User Management window, click Roles.
2. Locate the role and click Assign/Remove User(s) in the Action column.
3. Use the appropriate procedure to assign or remove users to or from the role.
   
   • To assign users to a role
     
     • In the Available Users column, select one or more users and click Assign to move the users to the Assigned User column.
     • To assign all users in the list, use Select All in the top row of the Available Users column, and click Assign to move the users to the Assigned User column.
     • Search for users in the Search field of the Available Users column, select them, and click Assign to move them to the Assigned User column.
   • To remove users from a role
     
     • In the Assigned User column, select one or more users and click Remove to move the users to the Available Users column.
     • To remove all users in the list, use Select All in the top row of the Assigned Users column, and click Remove move the users to the Available User column.
     • Search for users in the Search field of the Assigned User column, select them, and click Remove to move them to the Available User column.
4. Click Done.

Related topics

Managing permissions

Installing the repository (for default Remedy SSO login credentials)