Working with security groups

The Security group is equivalent to a role in the endpoint manager and is used for data segregation. Roles belonging to an endpoint are listed on the Add Security Group page.

To login as a user belonging to a particular role, the role must be added from the Add Security Group page.

For more information on the roles and permissions, see Roles and permissions for the BMC Helix Portal.

The Automation Console tabs and pages are accessible based on the permissions assigned to the role in the BMC Helix Portal.

To add a security group

In Helix endpoint	In TrueSight Server Automation endpoint	In TrueSight Network Automation endpoint
On the Configuration > Manage Security Groups page, click Add Security Group. Select a role from the Group Name field and add an optional description. Important: The roles that are available in BMC Helix Portal are listed here. Click Add.	On the Configuration > Manage Security Groups page, click Add Security Group. Select a role from the Group Name field and add an optional description. The connector field shows the endpoint manager's host name. Important: The roles that are available in TrueSight Server Automation are listed here. In the Default Depot Path field, click Browse to select the default location in Server Automation where you want to store the depot items. As a part of the group, when you create depot items, they are stored at this location. In the Default Job Path field, click Browse to select the default location in Server Automation where you want to store jobs. When you create jobs, they are stored at this location. Click Add. Important: If you add a security group to the TrueSight Server Automation endpoint, the same role is created in BMC Helix portal. For more information about the default permissions assigned for roles, see Default permissions assigned for roles in BMC Helix Portal.	On the Configuration > Manage Security Groups page, click Add Security Group. Select a realm from the Group Name field and add an optional description. Important: The roles that are available in TrueSight Network Automation are listed here. Click Add.

To view the list of security groups

On the Configuration > Manage Security Groups page, you can view all the security groups created based on the selected endpoint in Automation Console.

In Helix endpoint	In TrueSight Server Automation endpoint	In TrueSight Network Automation endpoint
The security group details, such as the name and description, are displayed.	The security group details, such as the name, description, connector type, and the connector host and port details, are displayed.

To edit a security group

On the Configuration > Manage Security Groups page, click Edit for the security group, make changes, and click Update.

After a security group is added, you can make changes only to the following fields:

In Helix endpoint	In TrueSight Server Automation endpoint	In TrueSight Network Automation endpoint
The Group description field.	Only the Group Description, Default Depot Path, and Default Job Path fields, where the depot items and jobs are to be saved in	The Group description field.

You cannot update the role for a security group.