A SaaS administrator is one who is employed by a subscribing customer of a service provider. The extent to which the SaaS administrator handles access control depends on the contractual relationship between the two companies. This topic describes two different scenarios for SaaS administrators. In both scenarios, Calbro represents the service provider company and Acme represents its SaaS subscriber.
Authorization profiles and SaaS administrators
Although tenant users can be assigned to the default authorization profiles, SaaS administrators cannot modify them or the components that they comprise. However, SaaS administrators can create authorization profiles for their users.
Access control shared by SaaS and service provider administrators
In this scenario, Calbro creates a new tenant in BMC Atrium Single Sign-On. If Acme uses LDAP, then Calbro's administrator configures the LDAP integration for Acme in BMC Atrium Single Sign-On. Acme's administrator maintains the LDAP server for Acme users.
Because Acme's administrator is a member of the BmcTenantAdmin group, he can access Administration menu options and create roles and authorization profiles for his users. These authorization profiles are not accessible by any users or administrators in other tenants.
SaaS administrator responsible for user access
Following the preliminary onboarding activities required to set up a tenant, the tenant administrator performs administrative tasks similar to those of the on-premises administrator.
To get started with role-based access management, refer to the following topics:
Overview
Content Tools
Apps
Reporter Replacement
com.bmc.atlassian.bmc-util-plugin-2.section.label
Tasks
2 Comments
Melody Locke
Melody Locke