Creating authorization profiles

When you create an authorization profile, you must associate the authorization profile with user groups, roles, and objects. This association controls the access given to specific user groups, roles, or objects. Users who are members of the Administrators group can create authorization profiles. 

Before you begin

• You must have access to the user groups, roles and permissions, and objects to include in the authorization profile. 
• User groups and roles must be available to select during the creation of the authorization profile. Because objects are not a required component, you can create an authorization profile without them, and specify the objects at a later time.
• Before you can specify infrastructure objects, you must have added the infrastructure servers to the TrueSight Presentation Server, as described in  Registering the components with the Presentation Server.

To create an authorization profile

1. Log on to the TrueSight console, and in the navigation pane, select Administration > Authorization Profiles.
2. On the Authorization Profiles page, select the page action menu , and select Create
3. On the Create Profile page, enter a name for the new authorization profile.
4. Specify the user groups for your realms.
   If your system comprises multiple realms, you can specify user groups from more than one realm. 
   1. Select the User Groups tab. 
   2. Click + Add to open the Search for User Groups box. 
   3. Select the user groups to include from the realm, and click OK.
   4. (Optional) Specify groups from another realm.
5. Specify the roles:
   1. Select the Roles tab, and select + Add.
   2. Select the roles to include, and click OK.
      The list of roles includes the default roles and user-created roles. 
6. To specify the objects that users in this profile can access, select the Objects tab, and perform the following steps. Otherwise, skip to the next step. 
   
   1. To specify objects that users can access in the TrueSight Presentation Server, select TrueSight Presentation, and specify an available type and source. To specify individual objects, select the action menu and select available objects from the list.  
   2. To specify objects that users can access in TrueSight Infrastructure Management, select TrueSight Infrastructure, and specify an available type and source. To specify individual objects, select the action menu and select available objects from the list.  
   3. Click Save.
7. To grant unrestricted access to all objects, select the Objects tab, and perform the following steps:
   1. Select the Associated Objects action menu. 
   2. Select Edit, and in the Unrestricted Access for Types box, select one or more options.
   3. Click Save. 

Related topics

Managing authorization profiles

Editing and deleting authorization profiles

Managing roles

Specifying objects

PATROL Agent ACLs