Tenant user roles and permissions

This topic presents roles and permissions for tenant users.

Each tenant role has permissions that determine what features you as a tenant user can view and what tasks you can perform. For example, Access Manager users can create accounts, but Application Owners cannot access account access features.

The following table lists the tenant user roles and their permissions, including roles for when BMC Application Diagnostics is integrated with BMC Real End User Experience Monitoring. 

Tenant roles and permissions matrix

Role	Permission
	User management	Watchpoint configuration (integration)	Dashboard configuration	Data analysis	Accessibility to Analyzer  (integration)
Access Manager
Application Owner
Observer

The user with the Access Manager role can assign one of the following roles to other tenant users:

• Access Manager — Performs user management for the tenant, including creation, editing, and deletion of other Access Manager accounts. The first Access Manager user is created by the tenant's provider, but Access Managers can create other Access Manager users.

  Access Manager roles would be given to a security administrator in the tenant organization.

• Application Owner — Configures dashboards and tenant-specific configurations.

  When integrated with BMC Real End User Experience Monitoring, the Application Owners configure Watchpoints and run Performance Analytics Engine queries. When an Application Owner user launches the Real User Analyzer from the BMC Application Performance Management Console, that user has Operator permission on the Analyzer. Application Owners can also see all the data that Observers can see.

  Application Owner roles would be given to application developers and network administrators in the tenant organization.

• Observer — Sees the BMC Application Diagnostics data in the BMC Application Performance Management Console, examines transaction tracing information and diagnostics data. Observer users who launch the Real User Analyzer from the BMC Application Performance Management Console also have Observer permission on the Analyzer. 
  
  Observer roles would be given to anyone in the tenant organization who needs to investigate (but not configure) performance and availability problems, such support analysts.

Related topics

Managing tenant access
User accounts and roles