Authorization profile structure
The following diagram illustrates the basic structure of an authorization profile. Each profile is associated with one or more realms and comprises user groups, roles and permissions, and objects. You can use each default authorization profile as is, you can modify any of its elements, or you can create your own authorization profiles.
The Superadmin in the BmcRealm can create and modify authorization profiles and apply them to multiple tenants. Authorization profiles created by tenant administrators apply to users of that tenant. For more information about tenant user administration, see Access control for SaaS administrators.
Authorization Profile components
When creating an authorization profile, you must already know the user groups, roles, and objects required for the new profile. You cannot create or modify components during the creation of the authorization profile.
See the following topics for more information about modifying and creating the required elements:
The Solution Administrator profile has unrestricted access to all realms and all features and objects in the Operations Management solution. The following table shows the user groups, roles and permissions, and objects the compose the Solution Administrator authorization profile.
| Solution Administrator | ||||||
| BmcRealm | ||||||
| User Groups | Roles and Permissions | Objects | ||||
| Administrators | Super Admin | All Permissions Assigned | Category | Types | Sources | Objects |
| TrueSight Presentation | Monitoring Policy Configuration Types PATROL Solutions PATROL Agent ACLs Devices Event Groups Groups Applications | TrueSight Presentation Server | All Object Access | |||
| TrueSight Infrastructure | Views Monitor Groups CIs Component Folders Event Folders | Not applicable | All Object Access | |||
Predefined user groups and users
When you install BMC TrueSight Presentation Server, the following default user groups and users are created in your BMC Atrium Single Sign-On (SSO) server for the default BmcRealm tenant. Not all default user groups contain default users. Internal user that supports: Internal user that supports: Internal user that supports TrueSight Capacity Optimization Integration After you register an App Visibility portal in the TrueSight console, a new user, App_Visibility_Internal_tspsHostID, is automatically added to Atrium Single Sign-On. This is an internal user with a randomly generated password and should not be changed. Default user groups Default users Description Administrators admin Default administrator user bppmws_internal csm_user API Group apiuser Capacity_Administration None NA Capacity_View None NA Central Monitoring Administrators None NA Model Administrators service_admin Default service model administration user for the Presentation Server and Infrastructure Management Monitoring Administrators event_admin Default event administration user for the Presentation Server and Infrastructure Management Operators oper Default operator user for the Presentation Server and Infrastructure Management Supervisors user Default supervisor user for the Presentation Server and Infrastructure Management Viewers None NA WS Full Access None NA
For more information about default users and passwords, see Default users and user groups.
Default authorization profiles and menu access
The following table lists the default authorization profiles and the default user groups and roles that compose them. To help you determine whether the default authorization profiles meet the access requirements of your organization, the last column in the table shows the menu options available to users in each default authorization profile.
| Profile | User groups | Roles | Menu access |
|---|---|---|---|
| Solutions Administrator | Administrators | Super Admin | Dashboards Monitoring
Configuration
Administration
Central Monitoring Administration |
Application Specialist–Services | Central Monitoring Administrators Monitoring Administrators Service Model Administrators Supervisors WS Full Access | Blackout Administrator Data Collection Administrator Deployment Administrator Event Administrator Event Supervisor Monitoring Administrator Service Administrator Service Supervisor Web Services Access | Dashboards Monitoring
Configuration
Administration
Central Monitoring Administration |
Application Specialist–Applications | Central Monitoring Administrators Monitoring Administrators Service Model Administrators Supervisors WS Full Access
| Application Operator Application Supervisor Blackout Administrator Data Collection Administrator Deployment Administrator Event Administrator Event Supervisor Monitoring Administrator Service Administrator Service Supervisor Web Services Access
| Dashboards Monitoring
Configuration
Administration
Central Monitoring Administration |
| Technology Specialist | Central Monitoring Administrators Monitoring Administrators Supervisors WS Full Access | Blackout Administrator Data Collection Administrator Deployment Administrator Event Administrator Event Supervisor Monitoring Administrator Service Supervisor Web Services Access
| Dashboards Monitoring
Configuration
Administration
Central Monitoring Administration |
| IT Operations User | Operators | Application Operator Data Collection Operator Event Operator Service Operator | Dashboards Monitoring
|
| Service Manager | Central Monitoring Administrators Model Administrators Monitoring Administrators Supervisors WS Full Access
| Event Administrator Service Administrator Event Supervisor Service Supervisor Data Collection Administrator Web Services Access Blackout Administrator Deployment Administrator Monitoring Administrator | Dashboards Monitoring
Configuration
Administration
Central Monitoring Administration |
| Executive | Viewers | Read Only | Dashboards Monitoring
|
| Capacity Administration | Capacity_Administration | Capacity Administrator | Dashboards Administration
|
| Capacity View | Capacity_View | Capacity Operator | Dashboards |
Overview
Content Tools
Apps
Reporter Replacement
com.bmc.atlassian.bmc-util-plugin-2.section.label
Tasks