User accounts, groups, and permissions for BMC Digital Workplace Catalog

BMC Digital Workplace Catalog server maintains an independent user database, separate from the databases used by other applications, such as BMC Digital Workplace and Remedy IT Service Management (ITSM). The users are stored in the tenant database and are not shared directly with other applications.

The BMC Digital Workplace Catalog database contains the accounts for users who can request service catalog items. The user database is also where a system administrator or service catalog administrator can specify the permissions for users who can log in to the catalog administration console to manage the service catalog.

User accounts

You create user accounts manually or by running a script to copy the user database from Remedy ITSM. After you create the user account, you can entitle the user to view and request catalog items, or promote the user to an administrative role.

User groups

The user groups are automatically created when you run the script to copy the user database from Remedy ITSM. BMC Digital Workplace Catalog groups are unique, and do not share any relationship with permission groups that other applications use. The group names include the company, organization, and department attributes of the user records.

You can grant permissions to multiple users that belong to a custom user group to view and request service catalog items.

People groups

Create and manage people groups that end users can add as collaborators. Do not create people groups if you want your end users to add only individual users as collaborators to their requests. Your end users will still be able to create one default group for their personal use.

To add individual users

1. In BMC Digital Workplace Catalog, go to People > People Groups.
2. Click New Group and create the group, or select an existing group and select Actions > Open.
3. Next to Users, click Add.

4. Select the users you want to add, and click Add.

   To filter the list of users, enter a string in the Search box at the top of the User Directory panel.

   Note

   Only users with Enabled profile status are available for search.

To add users by attributes

1. In BMC Digital Workplace Catalog, go to People > People Groups.
2. Click New Group and create the group, or select an existing group and select Actions > Open.
3. Next to Attributes, click Add and select one of the following options:

   • Click the ITSM Core tab.

     1. Expand the available categories as needed.

     2. Select the attributes that you want to assign, and click Save.
        

        Note

        ITSM Core attributes with no values are displayed as labels in the attributes tree.

   • Click the Other Fields tab.
     1. Expand the available categories as needed.

     2. Select the attributes that you want to assign, and click Save.

(Version 20.02.01 and later) To set the group visibility

1. In BMC Digital Workplace Catalog, go to People > People Groups.
2. Click New Group and create the group, or select an existing group and select Actions > Open.

3. Select one of the values from the Group Visibility section:

   Notes

   - Remedy ITSM administrators will be able to view all the groups.
   - End users must refresh their browser for group changes to take effect.

   • Everyone—Allows all users to add this group as a collaborator to their service requests.
   • Group Members—Allows users belonging to the group to add this group as a collaborator to their service requests.
   • Custom—Add users (individual or by attribute) who can add this group as a collaborator to their service requests.

Permission levels and groups

When you create a user account, you can specify the capabilities of the account by assigning a permission group. The following table lists the permission levels that you can assign to users accounts.

User account fields

When you create user accounts, you must provide the information in the following table. If you are creating user accounts by using Remedy Mid Tier, specify the Field name. If you are passing a JSON text file into a shell script, specify the Key name.