Managing users, roles, and permissions

This section describes how to manage user access to 

Some content is unavailable due to permissions.

and its components. It covers how to create users and roles, assign users to roles, and assign

Some content is unavailable due to permissions.

component permissions to roles.

Before getting started, review the overview in Authentication-and-authorization.

Some content is unavailable due to permissions.

uses a role-based authentication system (RBAC).

To use the RBAC system, you must perform the following tasks:

  • In Remedy Single Sign-On (Remedy SSO or RSSO) create a user for each of your organization's users who will access

    Some content is unavailable due to permissions.

    .
  • In Remedy SSO create roles based on your organization's needs.
    Think about the main user roles in your organization. What are the tasks that users with these roles perform and what

    Some content is unavailable due to permissions.

    components and content do they need to use to perform those tasks?
  • Assign users to roles.
  • Assign appropriate 

    Some content is unavailable due to permissions.

    access permissions to the roles.
    • Use Grid Manager to assign permissions associated with the grid.
    • Use Repository Manager to assign permissions associated with the repository and repository content.

If a user is associated with more than one role, the user is granted the most permissive permissions.

By default,

Some content is unavailable due to permissions.

provides the aoadmin user and AoAdmin role. The role has full access to the repository and to the grid. AoAdmin is a hard-coded role and is not used to administer the system.

Some content is unavailable due to permissions.

provides default permissions for access to grid, repository, and repository-content. You can create other permissions based on your needs.

Recommendation

BMC recommends the following:

  • No user be a member of the AoAdmin role except the aoadmin default user and that this group be used only to unlock the grid if you accidentally remove all the permissions.
  • After installing the primary CDP, remove the following permissions from the Default role: Development Studio, Grid Administration, and Grid Management.

 This section includes the following pages:

 

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*