Error: Invalid spaceKey on retrieving a related space config.

Managing Remedyforce CMDB user permissions

On the Remedyforce CMDB tab, users can view classes and add, edit, or delete configuration items (CIs) and assets of a class based on the assigned permissions to the object of the class. With the CMDB user permissions, system administrators and Remedyforce administrators can now assign user-specific permissions to restrict what non-administrator users can view and manage on the Remedyforce CMDB tab. The CMDB user permissions are applied at the CI and asset management level, and not at the level of a specific class. 

For example, if a non-administrator user has Read, Create, and Edit object permissions for CI classes, that user can view CI classes and create, update, and delete CIs and their relationships in the Remedyforce CMDB tab. As a system administrator, if you are required to restrict that non-administrator user to only view CIs on the Remedyforce CMDB tab, you can assign that user the Read-Only CMDB user permission for CI Management View. Once assigned, the user will only be able to view CI classes and related CIs on the Remedyforce CMDB tab.The CMDB user permissions only restrict the level of CI and asset management access of non-administrator users on the Remedyforce CMDB tab, and do not impact the object permissions assigned to a user.

Note

You can configure CMDB user permissions only for the non-administrator users. By default, system administrators and Remedyforce administrators have full CMDB user permission for both CI Management View and Asset Management View. Irrespective of the CMDB user permission that you may assign to a system administrator, the underlying full CMDB user permission is not configurable. For more information, see Remedyforce CMDB user permissions.

The following topics are provided:

Assigning CMDB user permissions from the Client form

To assign CMDB user permissions from the Client form, you must perform the following actions:

  1. Assign the custom version of the Client form to the system administrator once.
  2. Assign the CMDB user permissions from the custom version of the Client form.

To assign the custom version of the Client form to the system administrator

  1. Click the Remedyforce Administration tab.
  2. On the Home page, click the Application Settings tile, and from the menu, select Form Assignment.
  3. In the Form Assignment tab, from the Form to Assign list, select Client.
  4. In the Assign Form Without Field Sets list, select System Administrator.
  5. To move System Administrator from the Assign Form Without Fieldsets list to the Assign Form With Fieldsets list, click the right arrow.
  6. Click Save.

For more information, see Assigning custom forms to a profile.

To assign CMDB user permissions from the custom version of the Client form

  1. Click the Remedyforce Administration tab.
  2. On the Home page, click the Manage Users tile, and from the menu select Clients.
    The Clients option is also available in the Configuration list on the Remedyforce Workspaces tab.
  3. From the list of non-administrator user, select the user to whom you want to assign the CMDB user permissions.
  4. On the Clients form, select the required CMDB user permissions from the CI Management View and Asset Management View lists.
    For more information, see Remedyforce CMDB user permissions.

Assigning CMDB user permissions from the User page

To assign CMDB user permissions from the User page, you must perform the following actions:

  1. Assign the CMDB user permissions fields to the User page layout once.
  2. Assign the CMDB user permissions from the User page.

To assign CMDB user permissions fields to the User page layout

  1. Navigate to Setup > Customize > Users > Page Layouts.
  2. In the User Page Layouts section, in the Action column, click Edit next to the page layout that is assigned to the System Administrator profile.
  3. From the Fields palette, drag CI Management View and Asset Management View to the appropriate section on the page layout.
  4. Click Save.

To assign CMDB user permissions from the User page

  1. Click the Remedyforce Administration tab.
  2. On the Home page, click the Manage Users tile, and from the menu select Add and Edit User.
    For more information, see Adding or editing users.
  3. When you add or edit a user, on the User form, select the required CMDB user permissions from the CI Management View and Asset Management View lists.
    For more information, see Remedyforce CMDB user permissions.

Remedyforce CMDB user permissions

Based on your requirements, you can assign the following CMDB user permissions to a non-administrator user, which restrict what that user can view and manage on the Remedyforce CMDB tab:

Remedyforce CMDB permissionCI Management ViewAsset Management View
None

In a new installation or an upgrade:

  • If both CI and asset management are enabled, None is the default permission assigned to all existing users. For more information, see Managing the default CMDB user permissions.
  • If only CI management is enabled and you assign None to a user, that user will not be able to view CI classes and CIs on the Remedyforce CMDB tab.

In a new installation or an upgrade:

  • If both CI and asset management are enabled, None is the default permission assigned to all existing users. For more information, see Managing the default CMDB user permissions.
  • If only asset management is enabled and you assign None to a user, that user will not be able to view asset classes and assets on the Remedyforce CMDB tab.
HiddenIf you assign Hidden to a user, that user will not be able to view CI classes and CIs on the Remedyforce CMDB tab.

If you assign Hidden to a user, that user will not be able to view asset classes and assets on the Remedyforce CMDB tab.

Note

In a new installation or an upgrade, Hidden is the default CMDB user permission assigned to new users. For more information, see Managing the default CMDB user permissions.

Read-Only

If you assign Read-Only to a user, that user will only be able to view CI classes, related CIs, and their relationships.

For more information, see Managing CIs and assets based on CMDB user permissions.

If you assign Read-Only to a user, that user will only be able to view asset classes, related assets, and their relationships.

For more information, see Managing CIs and assets based on CMDB user permissions.

Update

If you assign Update to a user, that user will only be able to view CI classes, and create and update CIs and their relationships.

For more information, see Managing CIs and assets based on CMDB user permissions.

If you assignUpdate to a user, that user will only be able to view asset classes, and create and update assets and their relationships.

For more information, see Managing CIs and assets based on CMDB user permissions.

Update and Delete

If you assign Update and Delete to a user, that user will have full CMDB user permissions for CIs. The user will be able to view CI classes and create, update, and delete CIs and CI relationships.

For more information, see Managing CIs and assets based on CMDB user permissions.

Note

In a new installation or an upgrade, Update and Delete is the default CMDB user permission assigned to all new users for CI Management View. For more information, see Managing the default CMDB user permissions.

If you assign Update and Delete to a user, that user will have full CMDB user permissions for assets. The user will be able to view asset classes and create, update, and delete assets and asset relationships.

For more information, see Managing CIs and assets based on CMDB user permissions.

Managing the default CMDB user permissions

This section contains the following information:

Default CMDB user permissions of existing users

In a new installation or upgrade, depending on the CI and asset management configuration, existing users have the following default CMDB user permissions:

  • If both CI and asset management are enabled, None is the default permission assigned to all existing users for both CI Management View and Asset Management View. None assigns the following permission for the corresponding view:
    • CI Management View – Assigns all existing users the same permission as Update and Delete for CI Management View.
    • Asset Management View – Assigns all existing users the same permission as Hidden for Asset Management View.

In a new installation or upgrade, the default assignment of the None permission ensures minimal to no impact to the existing users. When None is the assigned permission for both CI Management View and Asset Management View, it indicates that the default CMDB user permissions of the existing users have not been manually updated.

Warning

For an existing user, if you manually update the default None permission to any other CMDB user permission for one of the views (CI Management View or Asset Management View), and retain the default None permission for the other view, the CMDB user permission for the view for which None has been retained will be treated as Hidden. For example, if you update the default None permission of a user for Asset Management View to Update and Delete, and do not update the default None permission for CI Management View, None permission for CI Management View will be treated as Hidden. The non-administrator user will only be able to manage assets, and will not have any access to CIs on the Remedyforce CMDB tab.

  • If only CI management, or asset management is enabled, the following default permissions are assigned to users for the corresponding view:
    • CI Management View – Assigns all existing users the Update and Delete permission.
    • Asset Management View – Assigns all existing users the Hidden permission.

Default CMDB user permissions of new users

In a new installation or upgrade, the Update and Delete permission for CI Management View and Hidden permission for Asset Management View are the default permissions assigned to all new users. On the Remedyforce CMDB tab, new users can only view CI classes and create, update, and delete CIs and their relationships.

Managing CIs and assets based on CMDB user permissions

Based on the CI and asset management configuration and the CMDB user permissions assigned, users can manage CIs and assets, and their relationships from the Remedyforce CMDB tab, Instance Editor, Relationships tab of the Instance Editor, and Relationships Editor.

Managing CIs when only CI management is enabled

Based on the CMDB user permissions assigned for CI Management View, a user can manage CIs as follows:

CMDB user permissionManaging CIs
Update and Delete
  • Remedyforce CMDB list view View, add, edit, and delete CIs.

    The New, Edit, Multiple Instance Editor, and Delete icons are enabled.

  • Instance EditorView the fields of an existing CI, and add and edit CIs.

    The New and Save icons are enabled.

  • Relationships tab (on the Instance Editor) – View and edit existing relationships, and add new relationships.

    The New, Edit, and Delete icons are enabled.

  • Relationships EditorView the fields of an existing relationship, and add and edit relationships.

    The Save icon is enabled.

Update
  • Remedyforce CMDB list viewView, add and edit CIs.

    The New, Edit, and Multiple Instance Editor icons are enabled.

  • Instance EditorView the fields of an existing CI, and add and edit CIs.

    The New and Save icons are enabled.

  • Relationships tab (on the Instance Editor) – View and edit existing relationships, and add new relationships.

    The New and Edit and icons are enabled.

  • Relationships EditorView the fields of an existing relationship, and add and edit relationships.

    The Save icon is enabled.

Read-Only
  • Remedyforce CMDB list viewView CIs.

    The Edit icon is enabled, which allows the user to view the fields of a CI on the Instance Editor. However, the New and Save icons on the Instance Editor are disabled.

  • Instance EditorView the fields of an existing CI.

    The New and Save icons are disabled.

  • Relationships tab (on the Instance Editor) – View existing relationships.

    The Edit icon is enabled, which allows the user to view the fields of a relationship on the Relationship Editor. However, the New and Save icons on the Relationship Editor are disabled.

  • Relationships EditorView the fields of a relationship.

    The Save icon is disabled.

Managing assets when only asset management is enabled

Based on the CMDB user permissions assigned for Asset Management View, a user can manage assets as follows –

CMDB user permissionManaging assets
Update and Delete
  • Remedyforce CMDB list viewView, add, edit, and delete assets.

    The New, Edit, Multiple Instance Editor, and Delete icons are enabled.

  • Instance EditorView the fields of an existing asset, and add and edit assets.

    The New and Save icons are enabled.

  • Relationships tab (on the Instance Editor) – View and edit existing relationships, and add new relationships.

    The New, Edit, and Delete icons are enabled.

  • Relationships EditorView the fields of an existing relationship, and add and edit relationships.

    The Save icon is enabled.

Update
  • Remedyforce CMDB list viewView, add and edit assets.

    The New, Edit, and Multiple Instance Editor icons are enabled.

  • Instance EditorView the fields of an existing asset, and add and edit assets.

    The New and Save icons are enabled.

  • Relationships tab (on the Instance Editor) – View and edit existing relationships, and add new relationships.

    The New and Edit and icons are enabled.

  • Relationships EditorView the fields of an existing relationship, and add and edit relationships.

    The Save icon is enabled.

Read-Only
  • Remedyforce CMDB list viewView assets.

    The Edit icon is enabled, which allows the user to view the fields of a CI on the Instance Editor. However, the New and Save icons on the Instance Editor are disabled.

  • Instance EditorView the fields of an existing asset.

    The New and Save icons are disabled.

  • Relationships tab (on the Instance Editor) – View existing relationships.

    The Edit icon is enabled, which allows the user to view the fields of a relationship on the Relationship Editor. However, the New and Save icons on the Relationship Editor are disabled.

  • Relationships EditorView the fields of a relationship.

    The Save icon is disabled.

Managing CIs and assets when both CI and asset management are enabled

If both CI and asset management are enabled, the top of the left navigation pane of the Remedyforce CMDB tab displays the CI, Asset, and All tabs. These tabs are displayed to a user only if that user has been assigned the required CMDB user permissions (Update and Delete, Update, or Read-Only) for both CI Management View and Asset Management View. If  a user is assigned the Hidden permission for one of the views, these tabs are not displayed. Based on the CMDB user permissions assigned for CI Management View and Asset Management View, a user can manage CIs and assets as follows:

  • Users who have the required CMDB user permissions (Update and DeleteUpdate, or Read-Only) only for the CI Management View, and have been assigned Hidden permission for the Asset Management View, can only manage CIs and their relationships. For more information, see Managing CIs when only CI management is enabled.
  • Users who have the required CMDB user permissions (Update and DeleteUpdate, or Read-Only) only for the Asset Management View, and have been assigned Hidden permission for the CI Management View, can only manage assets and their relationships. For more information, see Managing assets when only asset management is enabled.
  • Users who have access to the CIAsset, and All tabs on top of the left navigation pane of the Remedyforce CMDB tab can manage CIs and assets as follows:

Note

When a non-administrator user attempts to delete a record which is both a CI and an asset (CI/Asset instance), the UI displays different options to delete only the CI record, or the asset record, or both the CI and asset record. These options appear enabled, or disabled based on the CMDB user permissions assigned to the user, and the tab on the left navigation pane of the Remedyforce CMDB tab from where the user has selected the record. For more information see, Deleting configuration items and Deleting assets.

Managing CIs and assets from the All tab

You can manage CIs and assets and their relationships from the All tab of the Remedyforce CMDB tab as follows:

CMDB user permission for CI Management ViewCMDB user permission for Asset Management ViewInstance type

Managing CIs and assets

Update and DeleteUpdate and Delete
  • CI
  • Asset
  • CI/Asset
  • Remedyforce CMDB list view – View, add, edit, and delete CI, Asset, and CI/Asset instances.
    The New, Edit, Multiple Instance Editor, and Delete icons are enabled.
  • Instance EditorView the fields of an existing CI or asset, and add and edit CIs and assets.

    The New and Save icons are enabled.

  • Relationships tab (on the Instance Editor) – View and edit existing relationships, and add new relationships.

    The New, Edit, and Delete icons are enabled.

  • Relationships EditorView the fields of an existing relationship, and add and edit relationships.

    The Save icon is enabled.

Update and DeleteUpdate CI
  • Remedyforce CMDB list viewView, add, edit, and delete CIs.
    The New, Edit, Multiple Instance Editor, and Delete icons are enabled.
  • Instance EditorView the fields of an existing CI, and add and edit CIs. 

    The New and Save icons are enabled.

  • Relationships tab (on the Instance Editor) – View and edit existing relationships, and add new relationships.

    The New, Edit, and Delete icons are enabled.

  • Relationships EditorView the fields of an existing relationship, and add and edit relationships.

    The Save icon is enabled.

  
  • Asset
  • CI/Asset
  • Remedyforce CMDB list viewView, add, and edit Asset and CI/Asset instances.

    The New, Edit, and Multiple Instance Editor icons are enabled.

  • Instance EditorView the fields of an existing Asset and CI/Asset instance, and add and edit Asset and CI/Asset instances.

    The New and Save icons are enabled.

  • Relationships tab (on the Instance Editor) – View and edit existing relationships, and add new relationships.

    The New and Edit icons are enabled.

  • Relationships EditorView the fields of an existing relationship, and add and edit relationships.

    The Save icon is enabled.

Update and DeleteRead-OnlyCI
  • Remedyforce CMDB list viewView, add, edit, and delete CIs.

    The New, Edit, Multiple Instance Editor, and Delete icons are enabled.

  • Instance EditorView the fields of an existing CI, and add and edit CIs.

    The New and Save icons are enabled.

  • Relationships tab (on the Instance Editor) – View and edit existing relationships, and add new relationships.

    The New, Edit, and Delete icons are enabled.

  • Relationships EditorView the fields of an existing relationship, and add and edit relationships.

    The Save icon is enabled.

  
  • Asset
  • CI/Asset
  • Remedyforce CMDB list viewView Asset and CI/Asset instances.

    The Edit icon is enabled, which allows the user to view the fields of Asset and CI/Asset instances on the Instance Editor. However, the New and Save icons on the Instance Editor are disabled.

  • Instance EditorView the fields of existing Asset and CI/Asset instances.

    The New and Save icons are disabled.

  • Relationships tab (on the Instance Editor) – View the fields of existing Asset and CI/Asset instances.

    The New and Save icons are disabled.

  • Relationships EditorView the fields of a relationship.

    The Save icon is disabled.

Read-OnlyUpdate and DeleteAsset
  • Remedyforce CMDB list viewView, add, edit, and delete assets.

    The New, Edit, Multiple Instance Editor, and Delete icons are enabled.

  • Instance EditorView the fields of an existing asset, and add and edit assets.

    The New and Save icons are enabled.

  • Relationships tab (on the Instance Editor) – View and edit existing relationships, and add new relationships.

    The New, Edit, and Delete icons are enabled.

  • Relationships EditorView the fields of an existing relationship, and add and edit relationships.

    The Save icon is enabled.

  
  • CI
  • CI/Asset
  • Remedyforce CMDB list viewView CI and CI/Asset instances.

    The Edit icon is enabled, which allows the user to view the fields of CI and CI/Asset instances on the Instance Editor. However, the New and Save icons on the Instance Editor are disabled.

  • Instance EditorView the fields of existing CI and CI/Asset instances.

    The New and Save icons are disabled.

  • Relationships tab (on the Instance Editor) – View existing relationships.

    The Edit icon is enabled, which allows the user to view the fields of a relationship on the Relationship Editor. However, the New and Save icons on the Relationship Editor are disabled.

  • Relationships EditorView the fields of a relationship.

    The Save icon is disabled.

Read-OnlyRead-Only
  • CI
  • Asset
  • CI/Asset
  • Remedyforce CMDB list viewView CI, Asset, and CI/Asset instances.

    The Edit icon is enabled, which allows the user to view the fields of CI, Asset, and CI/Asset instances on the Instance Editor. However, the New and Save icons on the Instance Editor are disabled.

  • Instance EditorView the fields of existing CI, Asset, and CI/Asset instances.

    The New and Save icons are disabled.

  • Relationships tab (on the Instance Editor) – View existing relationships.

    The Edit icon is enabled, which allows the user to view the fields of a relationship on the Relationship Editor. However, the New and Save icons on the Relationship Editor are disabled.

  • Relationships EditorView the fields of a relationship.

    The Save icon is disabled.

UpdateUpdate
  • CI
  • Asset
  • CI/Asset
  • Remedyforce CMDB list viewView, add, and edit CI, Asset, and CI/Asset instances.

    The New, Edit, and Multiple Instance Editor icons are enabled.

  • Instance EditorView the fields of an existing CI, Asset, and CI/Asset instance, and add and edit CI, Asset and CI/Asset instances.

    The New and Save icons are enabled.

  • Relationships tab (on the Instance Editor) – View and edit existing relationships, and add new relationships.

    The New and Edit icons are enabled.

  • Relationships EditorView the fields of an existing relationship, and add and edit relationships.

    The Save icon is enabled.

Related topics

Adding or editing users

Deleting assets

Deleting configuration items

Managing permissions for CMDB classes

Configuring general BMC Remedyforce CMDB 2.0 settings

Was this page helpful? Yes No Submitting... Thank you

Comments