Managing Remedyforce CMDB user permissions
On the Remedyforce CMDB tab, users can view classes and add, edit, or delete configuration items (CIs) and assets of a class based on the assigned permissions to the object of the class. With the CMDB user permissions, system administrators and Remedyforce administrators can now assign user-specific permissions to restrict what non-administrator users can view and manage on the Remedyforce CMDB tab. The CMDB user permissions are applied at the CI and asset management level, and not at the level of a specific class.
For example, if a non-administrator user has Read, Create, and Edit object permissions for CI classes, that user can view CI classes and create, update, and delete CIs and their relationships in the Remedyforce CMDB tab. As a system administrator, if you are required to restrict that non-administrator user to only view CIs on the Remedyforce CMDB tab, you can assign that user the Read-Only CMDB user permission for CI Management View. Once assigned, the user will only be able to view CI classes and related CIs on the Remedyforce CMDB tab.The CMDB user permissions only restrict the level of CI and asset management access of non-administrator users on the Remedyforce CMDB tab, and do not impact the object permissions assigned to a user.
Note
You can configure CMDB user permissions only for the non-administrator users. By default, system administrators and Remedyforce administrators have full CMDB user permission for both CI Management View and Asset Management View. Irrespective of the CMDB user permission that you may assign to a system administrator, the underlying full CMDB user permission is not configurable. For more information, see Remedyforce CMDB user permissions.
The following topics are provided:
Assigning CMDB user permissions from the Client form
To assign CMDB user permissions from the Client form, you must perform the following actions:
- Assign the custom version of the Client form to the system administrator once.
- Assign the CMDB user permissions from the custom version of the Client form.
To assign the custom version of the Client form to the system administrator
- Click the Remedyforce Administration tab.
- On the Home page, click the Application Settings tile, and from the menu, select Form Assignment.
- In the Form Assignment tab, from the Form to Assign list, select Client.
- In the Assign Form Without Field Sets list, select System Administrator.
- To move System Administrator from the Assign Form Without Fieldsets list to the Assign Form With Fieldsets list, click the right arrow.
- Click Save.
For more information, see Assigning custom forms to a profile.
To assign CMDB user permissions from the custom version of the Client form
- Click the Remedyforce Administration tab.
- On the Home page, click the Manage Users tile, and from the menu select Clients.
The Clients option is also available in the Configuration list on the Remedyforce Workspaces tab. - From the list of non-administrator user, select the user to whom you want to assign the CMDB user permissions.
- On the Clients form, select the required CMDB user permissions from the CI Management View and Asset Management View lists.
For more information, see Remedyforce CMDB user permissions.
Assigning CMDB user permissions from the User page
To assign CMDB user permissions from the User page, you must perform the following actions:
- Assign the CMDB user permissions fields to the User page layout once.
- Assign the CMDB user permissions from the User page.
To assign CMDB user permissions fields to the User page layout
- Navigate to Setup > Customize > Users > Page Layouts.
- In the User Page Layouts section, in the Action column, click Edit next to the page layout that is assigned to the System Administrator profile.
- From the Fields palette, drag CI Management View and Asset Management View to the appropriate section on the page layout.
- Click Save.
To assign CMDB user permissions from the User page
- Click the Remedyforce Administration tab.
- On the Home page, click the Manage Users tile, and from the menu select Add and Edit User.
For more information, see Adding or editing users. - When you add or edit a user, on the User form, select the required CMDB user permissions from the CI Management View and Asset Management View lists.
For more information, see Remedyforce CMDB user permissions.
Remedyforce CMDB user permissions
Based on your requirements, you can assign the following CMDB user permissions to a non-administrator user, which restrict what that user can view and manage on the Remedyforce CMDB tab:
| Remedyforce CMDB permission | CI Management View | Asset Management View |
|---|---|---|
| None | In a new installation or an upgrade:
| In a new installation or an upgrade:
|
| Hidden | If you assign Hidden to a user, that user will not be able to view CI classes and CIs on the Remedyforce CMDB tab. | If you assign Hidden to a user, that user will not be able to view asset classes and assets on the Remedyforce CMDB tab. Note In a new installation or an upgrade, Hidden is the default CMDB user permission assigned to new users. For more information, see Managing the default CMDB user permissions. |
| Read-Only | If you assign Read-Only to a user, that user will only be able to view CI classes, related CIs, and their relationships. For more information, see Managing CIs and assets based on CMDB user permissions. | If you assign Read-Only to a user, that user will only be able to view asset classes, related assets, and their relationships. For more information, see Managing CIs and assets based on CMDB user permissions. |
| Update | If you assign Update to a user, that user will only be able to view CI classes, and create and update CIs and their relationships. For more information, see Managing CIs and assets based on CMDB user permissions. | If you assignUpdate to a user, that user will only be able to view asset classes, and create and update assets and their relationships. For more information, see Managing CIs and assets based on CMDB user permissions. |
| Update and Delete | If you assign Update and Delete to a user, that user will have full CMDB user permissions for CIs. The user will be able to view CI classes and create, update, and delete CIs and CI relationships. For more information, see Managing CIs and assets based on CMDB user permissions. Note In a new installation or an upgrade, Update and Delete is the default CMDB user permission assigned to all new users for CI Management View. For more information, see Managing the default CMDB user permissions. | If you assign Update and Delete to a user, that user will have full CMDB user permissions for assets. The user will be able to view asset classes and create, update, and delete assets and asset relationships. For more information, see Managing CIs and assets based on CMDB user permissions. |
Managing the default CMDB user permissions
This section contains the following information:
Default CMDB user permissions of existing users
In a new installation or upgrade, depending on the CI and asset management configuration, existing users have the following default CMDB user permissions:
- If both CI and asset management are enabled, None is the default permission assigned to all existing users for both CI Management View and Asset Management View. None assigns the following permission for the corresponding view:
- CI Management View – Assigns all existing users the same permission as Update and Delete for CI Management View.
- Asset Management View – Assigns all existing users the same permission as Hidden for Asset Management View.
In a new installation or upgrade, the default assignment of the None permission ensures minimal to no impact to the existing users. When None is the assigned permission for both CI Management View and Asset Management View, it indicates that the default CMDB user permissions of the existing users have not been manually updated.
Warning
For an existing user, if you manually update the default None permission to any other CMDB user permission for one of the views (CI Management View or Asset Management View), and retain the default None permission for the other view, the CMDB user permission for the view for which None has been retained will be treated as Hidden. For example, if you update the default None permission of a user for Asset Management View to Update and Delete, and do not update the default None permission for CI Management View, None permission for CI Management View will be treated as Hidden. The non-administrator user will only be able to manage assets, and will not have any access to CIs on the Remedyforce CMDB tab.
- If only CI management, or asset management is enabled, the following default permissions are assigned to users for the corresponding view:
- CI Management View – Assigns all existing users the Update and Delete permission.
- Asset Management View – Assigns all existing users the Hidden permission.
Default CMDB user permissions of new users
In a new installation or upgrade, the Update and Delete permission for CI Management View and Hidden permission for Asset Management View are the default permissions assigned to all new users. On the Remedyforce CMDB tab, new users can only view CI classes and create, update, and delete CIs and their relationships.
Managing CIs and assets based on CMDB user permissions
Based on the CI and asset management configuration and the CMDB user permissions assigned, users can manage CIs and assets, and their relationships from the Remedyforce CMDB tab, Instance Editor, Relationships tab of the Instance Editor, and Relationships Editor.
Managing CIs when only CI management is enabled
Based on the CMDB user permissions assigned for CI Management View, a user can manage CIs as follows:
| CMDB user permission | Managing CIs |
|---|---|
| Update and Delete |
|
| Update |
|
| Read-Only |
|
Managing assets when only asset management is enabled
Based on the CMDB user permissions assigned for Asset Management View, a user can manage assets as follows –
| CMDB user permission | Managing assets |
|---|---|
| Update and Delete |
|
| Update |
|
| Read-Only |
|
Managing CIs and assets when both CI and asset management are enabled
If both CI and asset management are enabled, the top of the left navigation pane of the Remedyforce CMDB tab displays the CI, Asset, and All tabs. These tabs are displayed to a user only if that user has been assigned the required CMDB user permissions (Update and Delete, Update, or Read-Only) for both CI Management View and Asset Management View. If a user is assigned the Hidden permission for one of the views, these tabs are not displayed. Based on the CMDB user permissions assigned for CI Management View and Asset Management View, a user can manage CIs and assets as follows:
- Users who have the required CMDB user permissions (Update and Delete, Update, or Read-Only) only for the CI Management View, and have been assigned Hidden permission for the Asset Management View, can only manage CIs and their relationships. For more information, see Managing CIs when only CI management is enabled.
- Users who have the required CMDB user permissions (Update and Delete, Update, or Read-Only) only for the Asset Management View, and have been assigned Hidden permission for the CI Management View, can only manage assets and their relationships. For more information, see Managing assets when only asset management is enabled.
- Users who have access to the CI, Asset, and All tabs on top of the left navigation pane of the Remedyforce CMDB tab can manage CIs and assets as follows:
- From the CI tab, users can manage CIs and their relationships. For more information, see Managing CIs when only CI management is enabled.
- From the Asset tab, users can manage assets and their relationships. For more information, see Managing assets when only asset management is enabled.
- From the All tab, users can manage both CIs and assets and their relationships. For more information, see Managing CIs and assets from the All tab.
Note
When a non-administrator user attempts to delete a record which is both a CI and an asset (CI/Asset instance), the UI displays different options to delete only the CI record, or the asset record, or both the CI and asset record. These options appear enabled, or disabled based on the CMDB user permissions assigned to the user, and the tab on the left navigation pane of the Remedyforce CMDB tab from where the user has selected the record. For more information see, Deleting configuration items and Deleting assets.
Managing CIs and assets from the All tab
You can manage CIs and assets and their relationships from the All tab of the Remedyforce CMDB tab as follows:
| CMDB user permission for CI Management View | CMDB user permission for Asset Management View | Instance type | Managing CIs and assets |
|---|---|---|---|
| Update and Delete | Update and Delete |
|
|
| Update and Delete | Update | CI |
|
|
| ||
| Update and Delete | Read-Only | CI |
|
|
| ||
| Read-Only | Update and Delete | Asset |
|
|
| ||
| Read-Only | Read-Only |
|
|
| Update | Update |
|
|
Comments
Log in or register to comment.