Managing static objects of a security profile

Static objects define existing database object types and objects. The Static Objects tab enables defining which of all existing database object types and objects an administrator is to be able to access and in which way. To access an individual object the administrator must be assigned at least read access to the respective top node. For example, the administrator must have at least read access to the Reports top node, to access a specific report. 

By default, the Static Objects tab, will always contain one entry which is the respective administrator. When administrators are created they will automatically be added here so that they can check their access rights. The default access defined at creation time is Read Access; any other access denied.

The following sections are provided:

The Static Objects tab displays the following information about the objects the administrator is given access to:

Adding a static object

When you add objects to the security profile, always include the complete hierarchy to the target object including the object's top node; otherwise, the administrators might still not be able to access the object.

1. Click Edit > Add Object .
   The Select Static Objects dialog box opens.

2. In the Object Type list, select the type of the database object to add. 
   This list is filtered according to your licenses.

   Note

   The Top Nodes object type option displays the complete list of all top nodes available in the console, so they can be added directly.

3. You have the option to change the view of the objects displayed. From the left panel select a method to display static object:
   • Click Hierarchy to see the objects in a hierarchy.
   • Click All to see all objects available to you.
   • Click Search to search for a specific object.
   • (Only for devices and groups) Click Topology to view a topological view of the objects. 
   The object list display will change depending on the option you select.
4. Select one or more objects from this window, or search for specific objects through the Search tab.
5. Click Add  to move the selected objects to the Selected Objects box.
   The Properties dialog box appears to define the type of access for the selected objects.

6. Select the respective options and then click OK.

   Note

   If the access rights to the local files and the Windows Registry are to be restricted to those those of the local account, check the option Respect Windows permissions when accessing files and the Registry in the Direct Access Acknowledgement panel. This option is only applicable to devices.

   The objects will be added to the Selected Objects box in which they will be listed with their name and their type.

7. (Optional) To add objects of another type repeat the preceding steps.
8. Click OK to add all selected objects to the list of security objects for the security profile.

Modifying access rights of a static object

Objects to which access is assigned via a group cannot be modified. To restrict the access further than that assigned through the group, the object must be assigned individually a second time with new settings.

1. Select the object for which the access is to be modified in the table in the right window pane.
2. Select Edit > Properties.
   The Properties dialog box appears.
3. Select the options for the desired type of access.
4. Click OK to confirm the modifications and close the window.

Removing an object

When you remove a parent object, you also remove all of its children and the administrators cannot access the children. 

1. Select the object to be removed from the list of security objects in the right window pane.
2. Select Edit  > Remove Object .
   A confirmation window appears.
3. Click OK to confirm the removal.