Assigning grid permissions


Note

Before getting started, review the permissions overview in Managing-permissions

Use the BMC Atrium Orchestrator Grid Manager Administration tab to manage permission groups. On the tab you can assign group access for workflow execution, or assign grid administration permissions as shown in the following figure:

Managing grid permissions by using the Grid Permissions tab

Grid manager permissiosn.jpg

This topic provides the following information:

In the Grid Manager, you can assign permissions to the group so the group members can:

  • See the Status tab
  • See the Manage tab
  • See the Admin tab
  • Use BMC Atrium Orchestrator Development Studio with this grid and execute workflows
  • Use a selected Operations Actions Management module
  • Run a workflow in BMC Atrium Orchestrator Development Studio

    Note

    To assign group permissions for a module, the module must be activated on the grid and the workflow must be exposed for the Operator Control Panel (OCP) or SOAP as required.

Default grid permissions

The following table describes the default permissions available in Grid Manager.

Permission

Description

View Grid Status

Members of the group can see the Status tab to check the grid status

Grid Management

Members of the group can see the Manage tab and manage content. Members can add adapters, remove adapters, activate content on the grid. If you select the Grid Management check box, the View Grid Status check box is selected by default and is disabled. Members can manage content and see the status of the grid.

Grid Administration

Members of the group can perform grid administration activities, which includes managing content, adding groups, removing groups, and copying groups. If you select the Grid Administration check box, the Grid Management and View Grid Status check boxes are selected by default and are disabled.

Development Studio

Members of the group can access the BMC Atrium Orchestrator Development Studio and run workflows.

Workflow execution permissions

When you activate a module on a grid, it is added to the Grid Permissions tab. All workflows inside the module appear in the permissions list. You can assign workflow execution permissions to the appropriate groups.

Note

When you create a new module, you must activate the module and set execute permissions for the new modules. When you create a new workflow inside an existing module, you must set permissions for that workflow. Workflows do not inherit permissions from their parent modules.

To add a permission group

  1. In the BMC Atrium Orchestrator Grid Manager application, select the Administration tab, and then select the Grid Permissions tab.
  2. Click Add Group, and then enter the name of the group.
  3. Click Save

    You can now assign permissions to the group.

    Note

    You cannot delete or modify the AoAdmin group.

You need to create the same groups in Atrium Single Sign On. For information about adding groups in Atrium Single Sign-On, see Creating-user-accounts-and-groups-assigning-user-accounts-to-groups-in-BMC-Atrium-SSO.

Note

If a user is a member of more than one group, the user is granted the most permissive permissions. If a user is not assigned to any group, that user is automatically a member of the Default group and is granted the default permissions.

To assign permissions to a group or remove them from a group

  1. Select the check box of each permission that you want to assign to the group or deselect it to remove a permission from a group.
    See Default grid permissions table for details. 
    For example
    To assign Grid Management permission for the Default group, in the Grid Management row, select the option under Default group.
    To remove Grid Management permission for the Default group, in the Grid Management row, deselect the option under Default group.
  2. Click OK to save the permission assignments.

To copy permissions from one group to another

  1. In the BMC Atrium Orchestrator Grid Manager application, select the Administration tab, and then select the Grid Permissions tab.
  2. Select the group from which you want to copy permissions, and then enter the group name in the Copy To Group Name text box where you want the permissions to be copied.
  3. Click Save.

To delete a group

  1. In the BMC Atrium Orchestrator Grid Manager application, select the Administration tab, and then select the Grid Permissions tab.
  2. Click Delete Group
  3. Select the group that you want to delete from the list and click Delete.

Managing permissions video

The following BMC Communities video (5:03) is part two of a two-part video series on managing users, groups, and permissions. This video demonstrates how to manage permissions in Repository Manager and Grid Manager.

icon-play.png https://youtu.be/9HEHgIcfBEY

Related topics

Managing-permissions
Assigning-repository-permissions

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*