Managing CMDB class permissions for object and user level

To view and manage (create, edit, and delete) a record of a class (configuration item (CI), asset, or Rule Based class), BMC Remedyforce validates the following permissions:

• Object-level permission to the profile—The user who is accessing the record of a class must have access (Read, Create, Edit, and Delete) to the object of the class. For example, a user whose profile is ServiceDesk Staff wants to access records of the Computer System class. BMC Remedyforce validates the permissions of the ServiceDesk Staff profile on the Computer System object. For all the out-of-the-box classes, a corresponding object is available. If you want to control access of a custom class for a profile, create an object in Salesforce with the name of the custom class and provide the required profile permissions to the object. For more information, see Assigning object-level permission to a profile.
• User-level permission to access CIs or assets—The Asset Management View and CI Management View permissions are added to the User page. The value selected in these permissions decide if a user can view, read, update, and delete an asset or CI in the Remedyforce CMDB tab. For example, if you select Hidden in the Asset Management View list, all asset classes are hidden for the user. To show a CI or asset to a user, after validating the object-level permission for the user profile, the value in these permissions are checked. For more information, see Assigning user-level permission to access CIs or assets.

To assign object-level permission to a profile

The following procedure is based on the enhanced profile user interface provided by Salesforce. For information about enabling the enhanced profile interface, see the Salesforce Help.

1. Click the Remedyforce Administration tab.
2. On the Home page, click the Manage Users tile, and from the menu, select Profiles.
3. On the Profiles page, click a user profile, such as ServiceDesk Staff.
4. In the Apps section, click Object Settings.
5. Click the object for which you want to manage permissions, such as Computer Systems.
6. Click Edit.
7. Configure the appropriate permissions of the object (Read, Create, Edit, or Delete).
   For example, to enable users of a profile to create and edit computer system records, select the Read, Create, and Edit check boxes for the Computer Systems object.
   For more information about permissions, see Salesforce Help.
8. Click Save.

To assign user-level permission to access CIs or assets

The Asset Management View and CI Management View permissions are not available on the User page by default.

1. To show the Asset Management View and CI Management View permissions on the User page, perform the following actions:
   1. Navigate to the required path:
      • For Salesforce Classic, go to Setup > Build > Customize > Users > Page Layouts.
      • For Salesforce Lightning, go to Setup > Platform Tools > Objects and Fields > Object Manager > User > User Page Layouts.
   2. In the User Page Layouts section, in the Action column, click Edit next to the page layout that is assigned to the System Administrator profile.
   3. From the Fields palette, drag CI Management View and Asset Management View to the appropriate section on the page layout.
   4. Click Save.
2. Navigate to the User page by performing one of the following actions:
   
   • For Salesforce Classic
     • Setup > Administer > Manage Users > Users 
     • Remedyforce Administration > Manage Users > Add and Edit User
   • For Salesforce Lightning
     Setup > Administration > Users > Users.
3. On the Users page, click Edit for the user whose CMDB permissions you want to manage.
4. In the Asset Management View and CI Management View fields, select the required values.
5. Click Save.

Related topics

BMC Helix Remedyforce CMDB Common Data Model

Managing Remedyforce CMDB user permissions

Managing CMDB classes

Creating and updating configuration items

Deleting configuration items