Working with security groups

The Security group is equivalent to a role in the endpoint manager and is used for data segregation. Roles belonging to an endpoint are listed on the Add Security Group page.

To login as a user belonging to a particular role, the role must be added from the Add Security Group page.

For more information on the roles and permissions, see Roles and permissions for the BMC Helix Portal.

The Automation Console tabs and pages are accessible based on the permissions assigned to the role in the BMC Helix Portal.

To add a security group

In Helix endpoint	In TrueSight Server Automation endpoint
On the Configuration > Manage Security Groups page, click Add Security Group. Select a role from the Group Name field and add an optional description. Important: The roles that are available in the BMC Helix Portal are listed here. Click Add.	On the Configuration > Manage Security Groups page, click Add Security Group. Select a role from the Group Name field and add an optional description. The connector field shows the host name of the endpoint manager. Important: The roles that are available in TrueSight Server Automation are listed here. In the Default Depot Path field, click Browse to select the default location in Server Automation where you want to store the depot items. As a part of the group, when you create depot items, they are stored at this location. In the Default Job Path field, click Browse to select the default location in Server Automation where you want to store jobs. When you create jobs, they are stored at this location. Click Add. Important: If you add a security group to the TrueSight Server Automation endpoint, the same role is created in BMC Helix portal. For more information about the default permissions assigned for roles, see Default permissions assigned for roles in BMC Helix Portal.

In Helix endpoint

In TrueSight Server Automation endpoint

On the Configuration > Manage Security Groups page, click Add Security Group.
Select a role from the Group Name field and add an optional description.
Important: The roles that are available in the BMC Helix Portal are listed here.
Click Add.

On the Configuration > Manage Security Groups page, click Add Security Group.
Select a role from the Group Name field and add an optional description. The connector field shows the host name of the endpoint manager.
Important: The roles that are available in TrueSight Server Automation are listed here.
In the Default Depot Path field, click Browse to select the default location in Server Automation where you want to store the depot items.
As a part of the group, when you create depot items, they are stored at this location.
In the Default Job Path field, click Browse to select the default location in Server Automation where you want to store jobs.
When you create jobs, they are stored at this location.
Click Add.
Important: If you add a security group to the TrueSight Server Automation endpoint, the same role is created in BMC Helix portal. For more information about the default permissions assigned for roles, see Default permissions assigned for roles in BMC Helix Portal.

Important

In the case of an existing role in BMC Helix Portal, the default permissions may not apply, and you will need to assign or modify the permissions manually.

To view the list of security groups

On the Configuration > Manage Security Groups page, you can view all the security groups created based on the Helix or TrueSight Server Automation endpoint in Automation Console.

In the Helix endpoint	In the TrueSight Server Automation endpoint
The security group details such as the name and description are displayed.	The security group details such as the name, description, connector type, and the connector host and port details are displayed.

To edit a security group

On the Configuration > Manage Security Groups page, click Edit for the security group, make changes, and click Update.

After a security group is added you can make changes only to the following fields:

In the Helix endpoint	In the TrueSight Server Automation endpoint
The Group Description field.	Only the Group Description, Default Depot Path, and Default Job Path fields where the depot items and jobs are to be saved in Server Automation.

Important

You cannot update the role for a security group.