Working with security groups

Security groups contain users that inherit a set of permissions based on the roles defined in the endpoint managers supported by the application.

TrueSight Automation Console supports TrueSight Server Automation and TrueSight Network Automation as endpoint managers.

Security groups in Automation Console must exactly map to the TrueSight Server Automation and TrueSight Network Automation roles.

User roles with administrative permissions can access all pages and tabs in Automation Console. Users with non-administrative permissions can access all pages except the Configurations page.
For example, users belonging to the BLAdmins role in Server Automation can access and perform all tasks in the Automation Console.

To add a security group

On the Configuration > Manage Security Groups page, click Add Security Group
Select a role from the Group Name field and add an optional description.
The roles (Server Automation) and realms (TrueSight Network Automation) available in the endpoint manager are displayed in the list.
The connector field displays the host name of the endpoint manager.

(For Server Automation only) In the Default Depot Path field, click Browse to select the default location in Server Automation where you want to store the depot items.
Depot items generated by users in this group get stored in this location.
(For Server Automation only) In the Default Job Path field, click Browse to select the default location in Server Automation where you want to store jobs.
Jobs created by users in this group get stored in this location.
Click Add.

The security group is added and is displayed on the Manage Security Groups page.

In Helix endpoint	In TrueSight Server Automation endpoint	In TrueSight Network Automation endpoint
On the Configuration > Security Groups page, click Add Security Group. Select a role from the Group Name field and add an optional description. Important: The roles that are available in BMC Helix Portal are listed here. Click Add.	On the Configuration > Security Groups page, click Add Security Group. Select a role from the Group Name field and add an optional description. The connector field shows the endpoint manager's host name. Important: The roles that are available in TrueSight Server Automation are listed here. In the Default Depot Path field, click Browse to select the default location in Server Automation where you want to store the depot items. As a part of the group, when you create depot items, they are stored at this location. In the Default Job Path field, click Browse to select the default location in Server Automation where you want to store jobs. When you create jobs, they are stored at this location. Click Add. Important: If you add a security group to the TrueSight Server Automation endpoint, the same role is created in BMC Helix portal. For more information about the default permissions assigned for roles, see Default permissions assigned for roles in BMC Helix Portal.	On the Configuration > Security Groups page, click Add Security Group. Select a realm from the Group Name field and add an optional description. Important: The roles that are available in TrueSight Network Automation are listed here. Click Add.

To view the list of security groups

On the Configuration > Manage Security Groups page, you can view all the security groups that are created in the Automation Console. The security group details such as the name, description, connector type, and the connector host and port details are displayed in the Automation Console.

To edit a security group

On the Configuration > Manage Security Groups page, click Edit for the security group, make changes, and click Update.

After a security group is added, for the TrueSight Network Automation endpoint manager, you can only make changes to the description, and for TrueSight Server Automation, you can make changes to the description, default depot, and job paths where the depot items and jobs are to be saved in Server Automation. You cannot update the role or realm for a security group.