Assigning grid permissions

Use the  Grid Manager Administration tab to manage permissions. Before getting started, review the permissions overview in Managing permissions.

Note

The tab uses the term "group." Group names this tab must align with your Remedy SSO role names or LDAP group names.

This documentation uses "role" to represent role/group in the authentication system.

In the Grid Manager Administration tab you can

  • Create groups.
  • Assign group access for workflow execution or grid administration.

This topic provides the following information:

In the Grid Manager, you can assign permissions to the group so that users assigned to the corresponding role/group can:

  • See the Status tab
  • See the Manage tab
  • See the Admin tab
  • Use  Development Studio with this grid and execute workflows
  • Use a selected Operations Actions Management module
  • Run a workflow in BMC Atrium Orchestrator Development Studio

Note

If a user is a member of more than one group, the user is granted the most permissive permissions. 

Default grid permissions

The following table describes the default permissions available in Grid Manager.

Permission

Description

View Grid Status

Users assigned to the role can see the Status tab to check the grid status

Grid Management

Users assigned to the role can see the Manage tab and manage content. Members can add adapters, remove adapters, activate content on the grid. If you select the Grid Management check box, the View Grid Status check box is selected by default and is disabled. Members can manage content and see the status of the grid.

Grid Administration

Users assigned to the role can perform grid administration activities, which includes managing content, adding groups, removing groups, and copying groups. If you select the Grid Administration check box, the Grid Management and View Grid Status check boxes are selected by default and are disabled.

Development Studio

Users assigned to the role can access the Development Studio and run workflows.

Workflow execution permissions

When you activate a module on a grid, it is added to the Grid Permissions tab. All workflows inside the module appear in the permissions list. You can assign workflow execution permissions to the appropriate groups.

Note

When you create a new module, you must activate the module and set execute permissions for the new modules. Workflows must be exposed for the Operator Control Panel (OCP) or SOAP as required.

When you create a new workflow inside an existing module, you must set permissions for that workflow. Workflows do not inherit permissions from their parent modules.

To create a group

Each group that you create must have a matching role (in Remedy SSO) or group (in LDAP) of the same name.

  1. In the  Grid Manager application, select the Administration tab, and then select the Grid Permissions tab.
  2. Click Add Group.
  3. Enter the name of the group and click Save.

You can now assign permissions to the group.

To assign permissions to a group or remove them from a group

  1. Select the check box of each permission that you want to assign to the group or deselect it to remove a permission from a group.
    You cannot modify permissions for the AoAdmin group.
    See Default grid permissions table for details. 
    For example
    To assign Grid Management permission for the TestA group, in the Grid Management row, select the option under TestA group.
    To remove Grid Management permission for the TestA group, in the Grid Management row, deselect the option under TestA group.
  2. Click OK to save the permission assignments.

To copy permissions from one group to another

  1. In the  Grid Manager application, select the Administration tab, and then select the Grid Permissions tab.
  2. In Copy From Existing Group, select the group from which you want to copy permissions, and then in Copy To Group Name enter the group name where you want the permissions to be copied.
    You cannot a group's permissions to the AoAdmin group; in other words, you cannot overwrite the AoAdmin group.
  3. Click Save.

To delete a group

  1. In the  Grid Manager application, select the Administration tab, and then select the Grid Permissions tab.
  2. Click Delete Group.
    You cannot delete the AoAdmin group.
  3. Select the group that you want to delete from the list and click Delete.

Related topics

Managing permissions
Assigning repository permissions

Creating and managing local users and roles in Remedy Single Sign-On

Was this page helpful? Yes No Submitting... Thank you

Comments