Default user roles and permissions

BMC Helix Capacity Optimization uses the default user roles in BMC Helix Portal to manage access to various functionality.

Each role has some default permissions that are assigned to it. You cannot edit the default user roles. You can create custom roles and assign permissions. For details, see Roles and permissions .

All permissions in BMC Helix Capacity Optimization are part of the capacity_optimization application. The objects to which you want to provide permissions are grouped as Resources. The following table lists the default user roles and permissions in BMC Helix Capacity Optimization. For details about the permissions in a resource group, see Permissions available for a resource.

Role	Description	Resource and Permissions
Capacity Administrator	Users in this group have access to to all the sections in BMC Helix Capacity Optimization. They can perform all the administrative activities.	Has all the permissions in the following resource groups: admin analysis api capacity_views cloud_migration_simulation domains events investigate models reports time_filters
Capacity Planner	Users in this group can perform all activities related to capacity planning. The users in this group have access to Views and the Workspace section. In the Administration section, they can edit and view the optimizer rules.	Has all the permissions in the following resource groups: analysis api capacity_views domains events investigate models time_filters Has specific permissions in the following resource groups: admin optimizer_rule_edit optimizer_rule_read reports edit read
Capacity Operator	Users in this group can access the Views and Investigate sections. The users cannot perform administrative activities such as creating custom views.	Has specific permissions in the following resource groups: api investigate read capacity_views edit read tags_edit tags_read investigate edit read
Capacity ETL Client	Users in this group can ingest data. The API user should be assigned the Capacity ETL Client role to install the Remote ETL Engine.	Has Edit permission for the data_ingestion resource.
Cloud Planner	Users in this group can define the on-premise cost and migration strategy, simulate the cloud migration, and view the Views and Investigate sections. The users cannot perform administrative activities such as creating custom views. The Cloud Planner role is available only if you have installed Cloud Migration Simulation.	Has specific permissions in the following resource groups: capacity_views edit read tags_edit tags_read cloud_migration_simulation edit read investigate edit read

Information

User groups in the Single Sign-On console are associated with corresponding roles in BMC Helix Capacity Optimization.

Permissions available for a resource

The following image displays the out-of-the-box permissions in BMC Helix Capacity Optimization:

This table describes the default permissions that are available when you add a new role. To learn how to add these permissions to a role, see Setting up roles and permissions .

Resource	Permissions	Description
admin	access_all_entities	Add, edit, and delete domains, systems, and business drivers.
	auth_profile_edit	Edit authorization profiles from the Administration tab.
	admin_section_edit	Edit the Data Warehouse and System sections in the Administration tab.
	admin_section_read	View the Data Warehouse and System sections in the Administration tab.
	benchmarks_edit	Edit the Benchmarks data in the Administration tab.
	etls_read	Manage ETL Tasks in the ETL & System Tasks section in the Administration tab. Run ETLs
	general_manager_edit	Add, edit, and delete Gateway Servers and Agent Lists in the Gateway Manager section of Administration tab.
	general_manager_read	View the Gateway Servers, Agent Lists, and Manager runs.
	optimizer_rule_edit	Create, edit, or delete thresholds. View metrics and indicators for a threshold. Create, edit, or delete optimizer rules and run alerts. View alert logs in the Administration tab.
	optimizer_rule_read	View alert logs in the Administration tab. View metrics and indicators for a threshold.
	tasks_edit	Add, edit, and delete System Tasks in the ETL & System Tasks section in the Administration tab.
	tasks_read	View System Tasks in the ETL & System Tasks section in the Administration tab.
	user_accounts_edit	Manage authorization profiles in the Administration tab.
analysis	edit	Create and edit analysis in the Workspace tab.
	read	View analysis in the Works folder.
	save_template	Create custom analysis templates. Edit and delete existing analysis templates.
api	agent_data_read	Access and view the Agent Data API. For details, see Agent Data API.
	dashboard_views_edit	Edit the Dashboard Views API.
	dashboard_views_read	Access and view the Dashboard Views API.
	data_provider_read	Access and view the Data Provider API. For details, see Data Provider API.
	investigate_edit	Edit the Investigate API.
	investigate_read	Access and view the Investigate API.
capacity_views	edit	View all the capacity views (out-of-the-box and custom views). Add and modify custom views.
	read	View all capacity views (out-of-the-box and custom views).
	tags_edit	Add tags to resources. Modify and delete tags that are already added to resources.
	tags_read	View tags on resources.
cloud_migration_simulation	edit	Manage the settings in Cloud Migration Simulation.
cloud_migration_simulation	read	View the budget notifications in Cloud Migration Simulation.
data_ingestion	edit	Used by the Capacity ETL Client role to ingest data.
domains	edit	Add, edit, and delete domains, systems, and business drivers.
	edit_admin_domains	Access all the systems and business driver nodes for inactive, dismissed, or newly discovered entities.
	read	View active systems and business drivers associated to one or more domains.
events	edit	Add, edit, and delete event rules in the Event Manager section of Administration tab.
events	read	View the event rules in the Event Manager section of Administration tab.
investigate	edit	Add and modify Investigate studies and study groups. View Investigate studies and study groups.
investigate	read	View Investigate studies and study groups.
models	edit	Add, edit, and delete models.
models	read	View models saved in the Works folder.
reports	edit	Add, edit, and delete reports.
	global_reports_edit	View the report templates available to users.
	read	View reports saved in the Works folder.
time_filters	edit	Add, delete, copy, or move global filters in the Workspace tab.

Default user roles and permissions

Permissions available for a resource

Comments