Configuring authorization profiles

As an administrator, you can manage users, groups, and roles in BMC Helix Portal For details, see  Role-based access control . 

Use the Authorization Profiles page in BMC Helix Continuous Optimization to:

• View the user groups for which authorization profiles are defined.

• View the domains that a user group is authorized to access.
  

• Authorize a user group to access specific domains.

• Modify an authorization profile to change the access for domains.

• Delete authorization profiles.

When creating or modifying an authorization profile, you are authorizing a user group to access specific domains.

Before you begin

• User groups must be created in BMC Helix Portal. For details, see  Setting up groups .
• Domains must be available. For details, see Setting up and managing domains in your workspace.
• You must have access to the user groups and domains to include in the authorization profile.

Adding an Authorization Profile

An authorization profile is associated with a user group. So, the authorization profile is created with the same name as the user group.

1. On the Administration > Authorization Profiles page, click Add Authorization Profile.

   If all the user groups that are created in BMC Helix Portal are already assigned to an authorization profile, the Add Authorization Profile option is not displayed.

2. From the Provide visibility to the user group list, select a user group that you have configured in BMC Helix Portal. 
   Only the user groups that are not assigned to an authorization profile are displayed.

3. In the Visible domains section, expand and select the domains which you want the user group to access. 
   If you select a parent domain, the user group will be authorized to access all the sub-domains automatically. 
   

4. Save the authorization profile. 
5. The Visible domains table displays the domains that you have selected. You can update the domain selection.

Now, the users of this group have access to the domains that you have selected. 

Editing or deleting an authorization profile

You can edit an authorization profile when you want to modify any of the domains selected for a user group. 

1. Select an authorization profile to edit or delete from the Authorization Profiles table. Alternately, you can also use the  icons to perform these actions directly.
   The domains associated with the selected authorization profile is displayed.
2. Click Edit or Delete.

• • On clicking Edit, the list of visible domains is displayed. Change your domain selections and click Save.
  • On clicking Delete, a confirmation message is displayed. Click OK to delete the selected authorization profile.

When editing an authorization profile, you can click  to delete single domains that you no longer want the user group to access. 

Deleting a domain group also removes all its descendants. Similarly, when a sub-domain is created under one of the domains authorized to view, all users of the group will be able to view it.

Configuring authorization profile for views

To configure an authorization profile for views or view groups, use the Capacity Views page in BMC Helix Continuous Optimization. For more information, see Managing views.