Managing permissions in TrueSight Orchestration

Some content is unavailable due to permissions.

uses role-based authentication system (RBAC). Access to the product is based on groups or roles rather than individual users.

Some content is unavailable due to permissions.

Platform uses BMC Remedy Single Sign-On (Remedy SSO or RSSO) as an authentication system. Groups or roles are added in Remedy SSO and by using the same group names, administrators control the permissions to be provided for accessing the components and the modules and workflows in the product.

Important

You must ensure that the groups created in the repository or the grid match the groups or roles in Remedy SSO. Administrators manually create groups in the repository and the grid.

Permissions are controlled via two areas in

Some content is unavailable due to permissions.

:

  • You manage permissions to the grid through the Grid Manager.
    For example, using the grid permissions, you can choose whether users belonging to a particular group can access the Grid Administration tab.
  • You manage permissions to the repository and repository content through the Repository Manager.
    For example, if you want to restrict a group from accessing the repository, update the permissions for that group in the Repository Manager.  

Notes

When you install TrueSight Orchestration Platform, two default groups – AoAdmin and Default are created in the repository and the grid. A default user – aoadmin is assigned to the AoAdmin group in Remedy SSO.

BMC recommends that you not associate any other users with the AoAdmin role. If you accidentally remove all the permissions, use this role to unlock the grid. For default credentials, see Accessing-and-navigating-the-Grid-Manager.

If a user is associated with more than one role, the user is granted the most permissive permissions. If a user is not associated with a role, that user is automatically assigned to the Default group and is granted the permissions assigned to the group.

Where to go next

For managing group permissions for the grid, see Assigning-grid-permissions. For managing group permissions for the repository, see Managing-repository-groups-and-permissions. 

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*