Creating Functional roles

To provide a person with access to one or more applications, administrators create and assign a functional role to a person record.

Functional role use case

Scenario

Consider a scenario where Chris, the Change Assignee uses the Change Management application to issue and resolve a change ticket. Along with Change Management application Chris uses the following applications to issue and resolve the ticket:

Knowledge Management, to refer to an existing knowledge article to resolve the issue, or create a new Knowledge article for future use.
Service Level Management, to provide correct level of service to meet the need of the issue.

Chris, therefore, requires permissions to these applications to resolve a ticket. The administrator creates a functional role for Chris which enables Chris to perform his tasks.

The following table explains the tasks involved in creating a functional role for Chris:

Task

Description

Reference

Example

1

Before you create the functional role, define the permissions if each deployed application by creating application roles.

Creating and modifying application roles

Define the following appliction roles with these associated permission levels:

Change Management
- Change Read
- Change Write
- Change Admin Write
Knowledge Management
- Knowledge Read
- Knowledge Write
Service Level Management
- SLM Read
- SLM Write

2

Create a functional role to grant permission to the person to access and use the applications.

Create a functional role

To resolve a ticket using Change Management, Chris requires access to applications like Knowledge Management and Service Level Management and should have all the necessary permissions to perform the tasks on these applications.

Create Change Manager functional role which is a collection of all the following roles:

Change Write
Change Admin Write
Knowledge Write
SLM Write

3

Assign the functional role to the person.

Assign a functional role to a person

Assign the Change Manager functional role to Chris. This enables Chris to easily access and use the applications with all of the required permission levels.

When you create a functional role and assign it to a person, the server performs certain tasks. For more information, see Server behavior.

To create a functional role

Log in to BMC Helix Innovation Studio, navigate to the Administration tab.
Select Server settings > Application permissions > Functional roles to open the Functional Roles UI.

Click New to add a new role and perform the following actions:

Field	Action
Application/Library	Select the name of the deployable application or library for which you are defining a functional role.
Functional role name	Enter a unique name for the functional role.
Description	Enter a description for the functional role.
Select Role	Select the application roles that you want to combine into one functional role. The Roles section displays the list of application roles from multiple applications or libraries.

Click Save.

You can also update (modify) or delete the functional roles using the Functional Roles UI.

To assign permission to a functional role

The administrator can assign additional permissions to functional roles.

Important

Make sure you do not delete the out-of-the-box roles that are assigned to a functional role. If you do, your changes will be reverted to the default settings when your BMC Helix Innovation Studio applications and servers are upgraded.

Log in to BMC Helix Innovation Studio, and navigate to the Administration tab.
Select Server settings > Application permissions > Functional roles.
From the Functional Roles page, open the functional role to which you want to assign additional permissions.
The Edit Functional Role pane is displayed.
From Select Role, expand a functional area whose roles you want to assign.
Select the check boxes that correspond to the roles you want to assign.
In Selected Role, the selected roles are added to the corresponding application name.
Click Save.

To assign a functional role to a person

Log in to Remedy Mid Tier.
From the Application Administration Console, click the Custom Configuration tab.
From the Application Settings list, select Foundation > People > People, and click Open.
On the People form, select the person to whom you want to assign a functional role.
Select Login/Access Details > IS Personas.
In the Login ID field, enter the login id for the person.
Click Update Personas.
On the IS Personas form, enter the following details:
Field
Description
Application Name Select the name of the deployable application for which you are defining an IS persona.
IS Persona Select the IS persona from the list you want to assign for the person.
Click Add/Modify.
Click Close.
Click Save.

Server behavior

When you create, update, or delete functional or application roles, or when you export or deploy your applications, the server automatically performs certain tasks. After every action the server rebuilds the group list and updates the user record.

The following table provides the details:

Action	Role	Tasks performed by the server
Create	Functional role	Creates a new group for the corresponding application role, if the application role is not mapped to any group. By default, the groups are named after the application role name. For example, Change Read. However, if the group name already exists, the group is named using a combination of application name and application role name. For example, ChangeManagementChangeRead. Maps application roles to corresponding groups. If one application role is added to multiple functional roles, the mapping between application role and group is created only for the first instance. Identifies the person record associated with functional role and updates the group list for the corresponding user record.
Create	Application role	Creates a new group for the corresponding application role, if the application role is not mapped to any group. By default, the groups are named after the application role name. For example, Change Read. However, if the group name already exists, the group is named using a combination of application name and application role name. For example, ChangeManagementChangeRead. Maps application roles to corresponding groups.
Update (modify)	Functional role	Creates a new group for the corresponding application role, if the application role is not mapped to any group. By default, the groups are named after the application role name. For example, Change Read. However, if the group name already exists, the group is named using a combination of application name and application role name. For example, ChangeManagementChangeRead. Maps application roles to corresponding groups. Identifies the person record associated with functional role and updates the group list for the corresponding user record. Updates the groups mapped to the application roles.
Update (modify)	Application role	Updates the group list for user records associated to the functional role.
Delete	Functional role	Updates the group list for user records associated to the functional role.
	Application role	Updates the group list for user records associated to the functional role. If a new group was created automatically by the server, the group is not deleted even after the application role is deleted. This group is reused, if you create an application role with same name later. You can manually delete the unwanted groups.
Export	Application	Exports functional role associated with that application in its bundle as schema data.
During deploy	Application	Creates or updates application roles. If an application role is added to a functional role, server performs the following tasks: Creates a new group for the corresponding application role, if the application role is not mapped to any group. By default, the groups are named after the application role name. For example, Change Read. However, if the group name already exists, the group is named using a combination of application name and application role name. For example, ChangeManagementChangeRead. Maps application roles to corresponding groups. Identifies the person record associated with functional role and updates the group list for the corresponding user record.
After deploy	Application	Creates or updates functional role on the target system. Creates a new group for the corresponding application role, if the application role is not mapped to any group. By default, the groups are named after the application role name. For example, Change Read. However, if the group name already exists, the group is named using a combination of application name and application role name. For example, ChangeManagementChangeRead. Maps application roles to corresponding groups. Identifies the person record associated with functional role and updates the group list for the corresponding user record.

Field	Description
Application Name	Select the name of the deployable application for which you are defining an IS persona.
IS Persona	Select the IS persona from the list you want to assign for the person.