The two tables in this topic list the permissions that you can assign when editing or creating roles. To help you find the permissions you need, you can filter the tables by the ability to edit a permission and the feature to which the permission applies. The tables provide the following information about each permission:
With the exception of the Central Monitoring Administration, which is a feature of the Presentation Server, the first table contains permissions that apply to the features in the Infrastructure Management component. The second table contains permissions that apply to features that you access from the TrueSight console (Presentation Server) when you first access the product.
Note
Although the permission name matches the permission in the Roles editor, some of the other information varies from the user interface. This differences were intentionally introduced to clarify the use of the permission.
Permissions that effect features in the Infrastructure Management component
Type | Internal | Category | Element | Default? | Permission | Description | IDD Notes (Always hide) |
---|---|---|---|---|---|---|---|
Edit | PRODADMIN | Product Administration | Admin | Access to Administration Console | Enables access to the Infrastructure Management administrator console | Row 45 | |
Edit | SERVICEMODEL | Services | Service View | Add a sub group | Enables you to add a sub group in the Service Editor | Row 57 pw admin->Service Editor->My Services->Right Click->Add a sub Group | |
View | UIADMIN | UI Administration | Agent Status | + | Allow Agent Status | Row 76 https://docs.bmc.com/docs/display/proactivenet96/Verifying+the+status+of+an+agent Allow Agent Status can be tested by creating a restricted user and not providing the permission to this user and then logging in that user to the TSIM Operations Console. The user must not see a menu entry to launch Agent Status (AQT) from the Agent Device entry. 19 TSIM default permissions are required. Agent Status Page link is controlled by this permission | |
Edit | THRESHOLD | Thresholds | Baseline | Allow Baseline Management | Row 73 https://docs.bmc.com/docs/display/proactivenet96/Managing+baselines Required to do baseline administration from OptionAdministration tab Baseline. The CI needs to be selected in the Auth Profile | ||
Edit | UNIFIEDADMIN | Unified Administrator | Central Monitoring Administration (CMA) WS APIs | Allow Central Monitoring Administration related web service APIs | Row 86 Web services authorization#55619 | ||
Edit | UIADMIN | UI Administration | Change Tracking | Allow Change Tracking | Row 77 User don’t have this permission will not be able to add & see the configuration changes events. With the permission user will be able to add & see configuration change events from OptionsAdministration page, device list and monitor list pages | ||
Edit | EVENT | Events | Event View | Allow Close Operation on an event for event owner | Close Operation enabled for event Owner | Row 6 Ops UI->Event Details->Operations->Close event
| |
Edit | UNIFIEDADMIN | Unified Administrator | Central Monitoring Administration (CMA) Blackout Policies | Allow CMA Blackout Policies Management | row 87 | ||
Edit | UNIFIEDADMIN | Unified Administrator | Central Monitoring Administration (CMA) IS Administration | Allow CMA Integration Service Administration | Row 88 Adding or editing a BMC ProactiveNet Integration Service through Central Monitoring Administration | ||
Edit | UNIFIEDADMIN | Unified Administrator | Central Monitoring Administration (CMA) Monitoring Policies | Allow CMA Monitoring Policies Management | Row 90 CMA Policies CRUD | ||
Edit | UNIFIEDADMIN | Unified Administrator | Central Monitoring Administration (CMA) Staging Policies | Allow CMA Staging Policies Management | Row 91 | ||
Edit | UIADMIN | UI Administration | Events | Allow Event Reduction | Row 79 User don’t have this permission will not be able to perform Intelligent event reduction from OptionsAdministration tab.
| ||
Edit | UIADMIN | UI Administration | Event Rule | Allow Event Rule Management | Row 78 | ||
Edit | AGENTACTIONS | Agent Actions | PATROL Agent Actions | Allow execution of Agent Actions | |||
View | GRAPH | Graphs | Custom Graph | + | Allow graph generation | Row 42 Views & Graph->Custom Graph Dependent permission required "Allow viewing of views" | |
Edit | UNIFIEDADMIN | Unified Administrator | Access to Central Monitoring Administration (CMA) | Allow access to Central Monitoring Administration | Row 85 | ||
Edit | REPORT | Reports | External Reports | Allow manage External Reports attribute set used in transferring data to external reporting DB | Row 54 Users don’t have this permission will not able to see ‘External Report’ Attribute type in Attribute set CRUD page and they will not able to create Attribute set used for external reports. Attribute Set CRUD is available under OptionsAdministration tab "Allow Manage Reports" OR "Allow SLO management" are the dependent permission to enable the Attribute Set. | ||
Edit | REPORT | Reports | Reports | Allow Manage Reports | Row 55 User don’t have this permission will not be able to create/update/delete/enable/disable the reports under report section. They will be just able to see the reports which are already created. | ||
Edit | WEBSERVICES | Web Services | Web Services APIs | Allow miscellaneous web service requests | Row 99 Allow miscellaneous web service requests | ||
Edit |
| UI Administration | UI (Infrastructure Management) | Allow Operation Console Preferences | Row 81 Options->Operations tab | ||
View |
| UI Administration | UI (Infrastructure Management) | + | Allow Operations Console | Row 82 BMC ProactiveNet Operations Console | |
Edit | UNIFIEDADMIN | Unified Administrator | PATROL Agent Operations | Allow PATROL Agent Operations | Row 92 | ||
Edit | WEBSERVICES | Web Services | PATROL KM WS APIs | Allow PATROL KM repository related web service APIs | Row 95 Allow PATROL KM repository related web service APIs >> Repository web-service APIs are not supported in Granite. | ||
Edit | UIADMIN | UI Administration | Performance Management | Allow Performance Management | Row 80 Ops UI->Options->Administration tab->BMC TrueSight Infrastructure Management->Performance Diagnostics | ||
Edit | WEBSERVICES | Web Services | Provisioning WS APIs | Allow provisioning related web service APIs | Row 97 | ||
Edit | THRESHOLD | Thresholds | Global Thresholds | Allow Setting of Global Thresholds | Row 74 https://docs.bmc.com/docs/display/proactivenet96/Managing+global+thresholds Required to do global threshold administration from OptionAdministration tab Intelligent Event Thresholds and places where we show tool menu shown with monitor context (Ex: Monitor list page, graph page) etc. | ||
Edit | THRESHOLD | Thresholds | Instance Thresholds | Allow Setting of Instance Thresholds | Row 75 Ops UI->Devices->Grid View->Device->Tools menu->Thresholds Required to do instance threshold administration from OptionAdministration tab Intelligent Event Thresholds and places where we show tool menu shown with monitor context (Ex: Monitor list page, graph page) etc. | ||
Edit | SLO | SLO | SLO (Service Level Objectives) | Allow SLO management | Row 71 | ||
View | SLO | SLO | SLO | + | Allow SLO management console | Row 72 | |
Edit | WEBSERVICES | Web Services | Event WS APIs | Allow the events related web service APIs | Row 94 Allow the events related web service APIs >> Required for Event CRUD web services on TSIM | ||
Edit | SERVICEMODEL | Services | Service View | Allow the user to add navigation links | Row 58 pw admin->Service Editor->Find CI->Right Click on CI->Add Service Link | ||
Edit | SERVICEMODEL | Services | Service View | Allow to edit component in Service tab | Row 59 pw admin->Service Editor->Edit Component | ||
Edit | SERVICEMODEL | Services | Service View | Allow to edit Maintenance Mode for Component | Row 60 Ops UI->Find CI->Graph View->Right Click->Operations | ||
Edit | SERVICEMODEL | Services | Service View | Allow to edit Manual Status for Component | row 61 Ops UI->Find CI->Graph View->Right Click->Operations | ||
Edit | UNIFIEDADMIN | Unified Administrator | Central Monitoring Administration (CMA) Manage Repository | Allow to Manage Repository | Row 89 Managing the repository in Central Monitoring Administration | ||
View | WEBSERVICES | Web Services | Performance APIs | Allow to retrieve Performance Data | Row 96 https://docs.bmc.com/docs/display/proactivenet96/Retrieving+data+from+BMC+ProactiveNet | ||
Edit | UNIFIEDADMIN | Unified Administrator | Trusted connection to PATROL Agent | Allow trusted connections to PATROL Agents | Row 93 Absence of the above permission for a logged in user (whether logged into BPPM Operation console or CMA console) will invoke a popup where user needs to enter a valid username/password combination of a user on the system hosting the PATROL agent. Without the username/password combination passing validation at the PATROL agent, the user will not be able to use the Query Agent functionality from any of the consoles. Presence of the permission allows user to bypass the authentication popup (it does not get displayed) and provides an ability to use the Query Agent functionality directly. | ||
Edit | UIADMIN | UI Administration | View | Allow View Management | Row 83 | ||
View | REPORT | Reports | Reports | + | Allow View Reports | Row 56 Ops UI->Navigation->Reports | |
View | UIADMIN | UI Administration | View | + | Allow viewing of views | Row 84 User don’t have this permission will not be able to see the Views & Graphs accordion in navigation tree This permission will only be helpful when you have “View Main Accordion” else it does not have any impact on whether this permission is present or not else if no main accordion then no children under Main accordion. | |
View | EVENT | Events | Home UI (Infrastructure Management) | + | Canvas View Title bar Controls (zoom, preferences) | Preferences This works fine in combination with “Canvas Views Editing” , “View Main accordion” and any one of selected in green
| Row 19 This permission enables the filter option and NOT the zoom, preferences in Canvas view. |
Edit | EVENT | Events | Home UI (Infrastructure Management) | Canvas Views Editing | Row 20 Edit from Preferences | ||
Edit | MISC | Miscellaneous | Schedule | Configure and Schedule Time Frames | Row 44 pw admin->Tools->TimeFrame Editor pw admin->Event Management Policies tab->pncell->By Selector->"Add Event Selector" icon->"Add Policy" icon->"Policy Activation Timeframe" | ||
Edit | EVENT | Events | Home UI (Infrastructure Management) | Create and edit Global CI Filters | row 22 Create a new Filter to find CI | ||
Edit | EVENT | Events | Event Filter | Create and edit Global Event Filters | Row 5 https://docs.bmc.com/docs/display/public/proactivenet96/Using+global+filters Make Global(all users) check box enabled.Able to edit \delete Global filter from other users. | ||
Edit | EVENT | Events | Events | Create and edit Global Event List Column Selector | Row 17 Event Collectors-EventView-Column Selector
| ||
Edit | SERVICEMODEL | Services | Service View | Create and edit Relationships between Service Model Components | Row 62 pw admin->Service Editor->Relationship CRUD | ||
Edit | PRODADMIN | Product Administration | Admin | Create and edit Remote Actions | Row 46 pw admin->Tools->Remote Actions->Remote Actions | ||
Edit | SERVICEMODEL | Services | Service View | Create and edit service model components | row 63 pw admin->Service Editor->Edit Component | ||
Edit | EVENT | Events | Events | Create and edit User Event List Column Selector | Row 18 Event Collectors-EventView-Column Selector
| ||
Edit | EVENT | Events | Event View | Create and Edit User-defined Event filters | Create new filter on Events UI. | Row 7 Able to create\edit and delete User Defined Event Filters. Global Filter check box not enabled. | |
Edit | SERVICEMODEL | Services | Service View | Delete service model components | Row 64 pw admin->Service Editor->Edit Component | ||
View | EVENT | Events | Home UI (Infrastructure Management) | Do not Apply Access Control on Event Collector | Row 23 If user has this permission, irrespective of collector permission user will be able to see the event collectors | ||
Edit Only | PRODADMIN | Product Administration | Device/Monitor | Edit Device/Monitor | Row 50 pw admin->Administration tab->Root->Device pw admin->Administration tab->Root->Monitor | ||
Edit | EVENT | Events | Home UI (Infrastructure Management) | Edit global default for tile view | Row 24 Tile View->User Preferences->Defaults Selection->All Users Tile Views
This permission will be only useful when user has permission to see the change user Preference for the tile page “Tile View Title bar Controls (sort, filter, zoom, preferences)” then if user also have this permission user will allowed to apply changes for “All Users Tile Views” for Background and layout and Tile metrics. | ||
Edit Only | PRODADMIN | Product Administration | Group | Edit Group | Row 52 pw admin->Administration tab->Root->Group | ||
Edit | EVENT | Events | Home UI | Edit Nav tree options | Row 25 Navigation Tree Options | ||
Edit | EVENT | Events | Event Editor | + | Edit Toolbar | Row 3 Edit toolbar | |
Edit | EVENT | Events | Home UI (Infrastructure Management) | Graph View Title bar Controls (preferences) | Row 26 Ops UI->Find CI->Select a CI->Graph View->Preferences | ||
Edit | EVENT | Events | Event Editor | Manage a panel on the configuration that allows user to select from available cells and build groups of cells and backup cells | In Infrastructure Management, used in the Admin Console to Configure Cells. | Row 4 Allows:- | |
Edit |
| Product Administration | PATROL Agent | Manage Agent | Row 49 (Not in 10) Permission to add/update/delete PNet agent. Not sure about its usage from 9.5 onwards, where we manage PNet agents (IS) from CMA | ||
Edit | PRODADMIN | Product Administration | Device/Monitor | Manage Device/Monitor | Row 51 pw admin->Administration tab->Root->Device pw admin->Administration tab->Root->Monitor | ||
Edit | PRODADMIN | Product Administration | Group | Manage Group | Row 53 pw admin->Administration tab->Root->Group | ||
Edit | EVENT | Events | Home UI (Infrastructure Management) | Navigation Tree - Create and Edit Global Components Branch | Row 27 Global Component Folder | ||
Edit | EVENT | Events | Home UI (Infrastructure Management) | Navigation Tree - Create and Edit Global Event Folders | Row 28 Global Component Folder | ||
Edit | EVENT | Events | Home UI (Infrastructure Management) | Navigation Tree - Mine Folder - Create and Edit - Event and Component Folders | Row 29 | ||
Edit |
| Events | Event View | Perform Operation on an event - Acknowledge, Unacknowledge | Row 8 | ||
Edit | EVENT | Events | Event View | Perform Operation on an event - Assign | Row 9 | ||
Edit | EVENT | Events | Event View | Perform Operation on an event - Close | Close event enabled only on assigning respective permissions | Row 10 https://docs.bmc.com/docs/display/public/proactivenet96/Closing+an+event | |
Edit | EVENT | Events | Event View | Perform Operation on an event - Re-open | Reopen Option enabled for assigned and closed event. | Row 11 https://docs.bmc.com/docs/display/public/proactivenet96/Closing+an+event | |
Edit | EVENT | Events | Event View | Perform Operation on an event - Set Priority | Set Priority enabled irrespective of permissions | Row 12 https://docs.bmc.com/docs/display/public/proactivenet96/Setting+the+priority+for+an+event | |
Edit | EVENT | Events | Event View | Perform Operation on an event - Take Ownership, Decline Ownership | Take Ownership,Decline Ownership enabled irrespective of permissions | Row 13 https://docs.bmc.com/docs/display/public/proactivenet96/Taking+ownership+of+an+event | |
Edit | EVENT | Events | Home UI (Infrastructure Management) | Predictions Show/Hide Button (Tile, Canvas views) | Row 30 Event Collectors->Tile View->Details->Predictions | ||
Edit | EVENT | Events | Event View | Send Manual Event | Send manual Event enabled irrespective of permissions | Row 14 https://docs.bmc.com/docs/display/public/proactivenet96/Sending+manual+events | |
Edit | EVENT | Events | Home UI (Infrastructure Management) | Tile View Title bar Controls (sort, filter, zoom, preferences) | Row 31 Tile View controls | ||
Edit | PRODADMIN | Product Administration | Admin | To access the Admin cell | Row 47 pw admin->Administration tab->Dynamic Data Editor->Infrastructure Management node is controlled with this permission. pw admin->Administration tab->Event Management Policies->Infrastructure Management node is controlled with this permission. Edit C:\Program Files\BMC Software\TrueSight\pw\admin\etc\ix.properties as follows infrastructure_management_node_visibility=true | ||
Edit | MISC | Miscellaneous | Formula Creation | To access the alias formula creation dialog box | Row 43 pw admin->tools->Event Alias Formulas | ||
Edit | PRODADMIN | Product Administration | Admin | To access the infrastructure management sub-tab | Row 48 This permission controls the access/visiblity of pw admin->Administration tab->Truesight Infrastructure Management Tab. | ||
Edit | SERVICEMODEL | Services | Service View | To edit service component details | Row 65 this particular permission is to edit CI, set maintenance mode action, manual status action, associate monitors action To search Cis in service model the permission to be used : To search service model components pw admin->Service Editor->Find CI->Right Click on CI->Edit Component pw admin->Edit->Edit Component pw admin->Edit Component icon Need dependent permission: To search service model components | ||
Edit | SERVICEMODEL | Services | Service View | To edit service component internals | Row 66 this particular permission is to edit Some restricted Slots of CI. To search Cis in service model the permission to be used : To search service model components | ||
View | SERVICEMODEL | Services | Service View | + | To search service model components | Row 67 pw admin->Service Editor->Find CI Ops UI->Find CI | |
View | EVENT | Events | Event View | To switch to service impact view | Using this permission you can view the CI being impacted by the event using the event action menu. Events->"Tools- Menu"->"Go To Graph View" option is controlled by this permission | Row 15 Events->"Tools- Menu"->"Go To Graph View" option is available after this permission is given. | |
Edit | SERVICEMODEL | Services | Service View | To view and edit Service Model | Row 68 pw admin->Service Editor->Find CI->drag and drop in service model editor | ||
View | SERVICEMODEL | Services | Service View | To view events for a component | Row 69 Ops UI->Find CI->Graph View->Right Click->View Events | ||
View | SERVICEMODEL | Services | Service View | To view events related to component | Row 70 Ops UI->Find CI->Graph View->Right Click->View Events | ||
View | EVENT | Events | Home UI (Infrastructure Management) | + | View All Abnormalities | Row 32 Ops UI->Navigation->Main->Global->Abnormalities This permission will only be helpful when you have “View Main Accordion” else it does not have any impact on whether this permission is present or not else if no main accordion then no children under Main accordion. | |
View | EVENT | Events | Home UI (Infrastructure Management) | + | View All Devices | Row 33 Ops UI->Navigation->Main->Global->Devices This permission will only be helpful when you have “View Main Accordion” else it does not have any impact on whether this permission is present or not else if no main accordion then no children under Main accordion. | |
View | EVENT | Events | Home UI (Infrastructure Management) | + | View All Groups | Row 34 Ops UI->Navigation->Main->Global->Groups This permission will only be helpful when you have “View Main Accordion” else it does not have any impact on whether this permission is present or not else if no main accordion then no children under Main accordion. | |
View | EVENT | Events | Home UI (Infrastructure Management) | + | View All Monitors | Row 35 Ops UI->Navigation->Main->Global->Monitors This permission will only be helpful when you have “View Main Accordion” else it does not have any impact on whether this permission is present or not else if no main accordion then no children under Main accordion. | |
View | EVENT | Events | Home UI (Infrastructure Management) | + | View All Services | Row 36 Ops UI->Navigation->Main->Global->Services This permission will only be helpful when you have “View Main Accordion” and "To view events for a component" else it does not have any impact on whether this permission is present or not else if no main accordion then no children under Main accordion. | |
View | EVENT | Events | Home UI (Infrastructure Management) | + | View Bookmarks accordion | row 37 Bookmarks accordion This permission will only be helpful when you have “View Main Accordion” else it does not have any impact on whether this permission is present or not else if no main accordion then no children under Main accordion. | |
View | EVENT | Events | Home UI (Infrastructure Management) | + | View Console drop down options | Row 38 OpsUI->Change Console For drop down options we should be on central server. This permission will only be helpful when you have “View Main Accordion” else it does not have any impact on whether this permission is present or not else if no main accordion then no children under Main accordion. | |
View | EVENT | Events | Home UI (Infrastructure Management) | + | View Event Collectors | Row 39 https://docs.bmc.com/docs/display/proactivenet96/Event+collectors
| |
Edit | EVENT | Events | Event View (Infrastructure Management) | View Event details | Event Details are visible irrespective of permissions | Row 16 | |
View | EVENT | Events | Home UI (Infrastructure Management) | + | View Main accordion | Row 40 Main Accordion This is must permission for any of the 6 default nodes to be seen on Ops UI | |
View | EVENT | Events | Home UI (Infrastructure Management) | + | View Other Cells accordion | row 41 Other Cells Accordion This permission will only be helpful when you have "Edit Navigation tree options" else it does not have any impact on whether this permission is present or not else if no main accordion then no children under Main accordion. | |
EVENT | Home UI | Change Notebook Tab Order | Row 21 You can change the order of the tabs within the Details Notebook by dragging and dropping a tab to the required location within the Details Notebook. | ||||
WEBSERVICES | Streaming APIs | Allow to execute Streaming related web service APIs | Row 98 Allow to execute Streaming related web service APIs |
Permissions that effect features in the Presentation Server
Type | Internal | Category | Element | Permission | Description | Notes |
---|---|---|---|---|---|---|
Edit | COMPONENTS | Components | Components View | Add and Edit Component | View, Add and Edit Component for TSIM, App Visibility & ITDA | |
View | APPLICATION | Application | Application Monitoring | Drill Down to IT Data Analytics | In context drill down to ITDA for a specific application and the devices it has. | |
Edit | SYNTHETIC | Synthetic Scripts | Synthetic Scripts View | Add and Edit Synthetic Scripts | Add/Delete/Replace synthetic script. For super admin this view can be filtered per tenant. | |
Edit | APP_VISIBILITY | App Visibility Agent Policies | App Visibility Agent Policies View | Edit and Apply App Visibility Policies to Agent | Add/Edit policies and apply to agents. For super admin this view can be filtered per tenant. | |
Edit | APP_VISIBILITY | App Visibility Agents | App Visibility Agents View | Edit App Visibility Agent | delete agent(s), this is just removing the agent in the UI. if/when the agent will report to the server, it'll be re-added automatically. For super admin this view can be filtered per tenant. | |
Edit |
| Configuration | Application Configuration View | Edit Application Configuration | Edit application configuration, Name, Description, Synthetic ON/OFF, Model, Synthetic SLA, Transaction SLA | |
Edit | APPLICATION | Application Discovery Rules | Application Discovery Rules View | Edit Application Discovery Rules | Edit discovery rules. Add/Edit/Delete/Move rule. For super admin this view can be managed/filtered per tenant. | |
View | EVENTS | Events | Monitoring View | Show Unmapped Events | ||
View | APP_VISIBILITY | App Visibility Agents | App Visibility Agents View | View All App Visibility Agents | view the list of agents and their status. For super admin this view can be filtered per tenant. | |
View | APPLICATION | Application | Applications | View All Applications | View the health of all applications. Filter & sort by importance/severity. Group applications by importance/severity. This view will also show Application SIM services imported from IM. Use with View All Tabs for an Application permission. | |
View |
| Business Transactions | Business Transactions View | View All Business Transactions | View business transactions for an application, this view is available by drill down from Application View Use with View Transaction Traces and View Trace Details permissions. | |
View | COMPONENTS | Components | Components View | View All Components | View Components info | |
View | SYNTHETIC | Executions | Executions View | View All Executions | View all Executions for an execution plan in a specific location | |
View |
| Locations | Locations View | View All Locations | View all locations for an application | |
View | APPLICATIONS | Application | Application Monitoring | View All Tabs for an Application | View all monitoring information for an application: Application View, Model, Devices & Events. This includes the App Visibility monitoring workflows/views Use with View All Applications permission. | |
View |
| User Transactions | User Tranactions View | View All User Transactions | View user transactions for an application | |
View | APP_VISIBILITY | App Visibility Agent Policies | App Visibility Agent Policies View | View App Visibility Agent Policies | View the list of policies and their content. For super admin this view can be filtered per tenant. | |
View |
| Configuration | Application Configuration View | View Application Configuration | View the list of application and their configuration info Use with View Application Configuration List permission. | |
View |
| Configuration | Application List View | View Application Configuration List | Use with View Application Configuration permission permission. | |
View |
| Application Discovery Rules | Application Discovery Rules View | View Application Discovery Rules | ||
View | SYNTHETIC | Synthetic Scripts | Synthetic Scripts View | View Synthetic Scripts | View all synthetic scripts. For super admin this view can be filtered per tenant. | |
View |
| Devices | Monitoring View | View the Devices Menu | ||
View |
| Events | Monitoring View | View the Events Menu | ||
View |
| Groups | Monitoring View | View the Groups Menu | ||
View |
| Single trace | Trace Details View | View Trace Details | View trace details Use with View All Business Transactions and View Transaction Traces permissions. | |
View |
| Traces | Traces View | View Transaction Traces | View traces list for a business transaction Use with View All Business Transactions and View Trace Details permissions. | |
Edit | EVENTS | Events | Monitoring View | Allow Managing Remote Cells | View events from remote cells and manage them. Use with Allow the events related web service APIs permission. |