Typical permissions combination setups
Typically, you assign permissions combinations to the users in your IT organization based on their roles and responsibilities. The combinations suggested in the following table are defined by ITIL as typical and are used by the BMC Service Management Process Model (SMPM).
The following table is organized by application, role, and the permissions combination recommended for the role.
| Application | Role | Permissions combination |
|---|---|---|
| Asset Management | Configuration Administrator |
Optional permissions
This permission is needed only when the user must create Support Groups that manage CIs. Otherwise, grant them the functional role of Support Group Admin.
This permission is needed only if the user must create and update the Product Categorization data structures for the CI data. |
| Purchasing Agent |
| |
| Change Management | Change Approver |
Functional role required You must assign this functional role to the user in addition to the permissions.
Important: You can give this functional role to anyone who approves changes. It applies to all roles. |
| Change Coordinator |
Functional role required You must assign this functional role to the user in addition to the permissions.
| |
| Change Manager |
Functional role required You must assign this functional role to the user in addition to the permissions.
| |
| Customer Representative |
| |
| Release Management | Release Coordinator |
Functional role required You must assign this functional role to the user in addition to the permissions.
|
| Incident Management | Service Desk Analyst |
|
| Specialist |
| |
| Group Coordinator |
Important: You can give a user Master permissions if full access to Incidents is required.
Important: Give this individual Master permissions if they need full access to Problems, Known Errors or Solutions.
| |
| Operator |
| |
| Operations Manager |
| |
| On-Duty Manager |
| |
| Problem Management | Problem Coordinator |
Important: Give this individual Master permissions if they need full access to Problems, Known Errors or Solutions.
Functional Role You must assign this functional role to the user in addition to the permissions.
|
| Service Level Management | Service Level Administrator |
|
| Service Level Manager |
| |
| Service Owner |
|
When you assign permissions, it is important to use only the minimum number of permissions that allow the person to perform their job. BMC strongly recommends that you have only one set of permissions combinations for any given role. There are only a few key permissions that a general application user needs to perform their duties. For more information about these key permissions, see Permission groups and application access.
Comments