Portal Level Permissions


The Portal Level Permissions option specifies the types of operations this portal security group can perform. The authorizations that are selected reflect the authorizations granted to the role specified in the BSA Role Name field.

Removing an authorization at the portal level takes precedence over permissions granted to a role in BMC Server Automation. In other words, if a role is granted an authorization in BMC Server Automation but the corresponding check box is not selected here at the portal level, the role cannot perform that operation in the portal.

Requirements for auto-selection

When you select a role in the BSA Role Name field, the portal examines the permissions granted to that role in BMC Server Automation. If the role has been granted a minimum set of permissions needed to perform a type of operation in the portal, such as Compliance operations, the check box for that type of operation is selected automatically. 

Click here to see a list of the minimum permissions required.

The following table shows the minimum BMC Server Automation permissions that must be granted to a role for a check box to be selected automatically.

Success

Tip

Press "f" to view the table in a full screen view.

Batch

 Compliance

Deploy

NSH Script

Patch

BatchJob.Read 

AuditJob.Read 

DeployJob.Read 

NSHScriptJob.Read 

PatchingJob.Read 

BatchJob.Create 

Audit.Create 

DeployJob.Create 

NSHScriptJob.Create 

PatchingJob.Create 

BatchJob.Modify 

AuditJob.Modify 

DeployJob.Modify 

NSHScriptJob.Modify 

PatchingJob.Modify 

BatchJob.ModifySchedule 

AuditJob.ModifySchedule 

DeployJob.ModifySchedule 

NSHScriptJob.ModifySchedule 

PatchingJob.ModifySchedule 

BatchJob.ModifyTargets 

AuditJob.ModifyTargets 

DeployJob.ModifyProperties 

NSHScriptJob.ModifyTargets 

PatchingJob.ModifyTargets 

BatchJob.Execute

AuditJob.Execute

DeployJob.ModifyTargets 

NSHScriptJob.Execute

PatchingJob.Execute

BLPackage.Read 

DiscoveryJob.Read 

DeployJob.Execute

BLPackage.Read 

PatchRemediationJob.Read 

BLPackage.Write 

DiscoveryJob.Modify 

BLPackage.Read 

BLPackage.Write 

PatchRemediationJob.Create 

BLPackage.Modify 

DiscoveryJob.Modify 

BLPackage.Write 

BLPackage.Modify 

PatchRemediationJob.Modify 

BLPackage.ModifyProperties

DiscoveryJob.ModifyTargets 

BLPackage.Modify 

BLPackage.ModifyProperties

PatchRemediationJob.ModifySchedule 

ApplicationDiscoveryJob.*

DiscoveryJob.Execute 

BLPackage.ModifyProperties

ApplicationDiscoveryJob.*

PatchRemediationJob.ModifyTargets 

AuditJob.Read 

DiscoveryJob.Delete

ApplicationDiscoveryJob.*

JobFolder.Read 

PatchRemediationJob.Execute

Audit.Create 

Component.Read 

JobFolder.Read 

JobFolder.Write

PatchDownloadJob.Read 

AuditJob.Modify 

Component.Audit 

JobFolder.Write

JobGroup.Read 

PatchDownloadJob.Create 

AuditJob.ModifySchedule 

Component.Create 

JobGroup.Read 

JobGroup.Write

PatchDownloadJob.Modify 

AuditJob.ModifyTargets 

Component.ModifyExceptions

JobGroup.Write

DepotFolder.Read 

PatchDownloadJob.ModifySchedule 

AuditJob.Execute

ComponentGroup.Read 

DepotFolder.Read 

DepotFolder.Write

PatchDownloadJob.ModifyTargets 

DeployJob.Read 

ComponentGroup.Write 

DepotFolder.Write

ComponentTemplateFolder.Read

PatchDownloadJob.Execute

DeployJob.Create 

ComponentGroup.Modify

ComponentTemplateFolder.Read

ComponentTemplateGroup.Read

PatchCatalog.Read 

DeployJob.Modify 

ComponentTemplate.Read

ComponentTemplateGroup.Read

ComponentGroup.Read

PatchCatalog.Write

DeployJob.ModifySchedule 

ComponentTemplateFolder.Read 

ComponentGroup.Read

DepotFolder.Read 

PatchSmartGroup.Read

DeployJob.ModifyProperties 

ComponentTemplateFolder.Write

DepotFolder.Read 

DepotFolder.Write 

ComponentTemplate.Read

DeployJob.ModifyTargets 

ComponentTemplateGroup.Read 

DepotFolder.Write 

DepotFolder.Modify

ComponentTemplateGroup.Read

DeployJob.Execute

ComponentTemplateGroup.Write

DepotFolder.Modify

DepotGroup.Read 

Component.Read

PatchingJob.Read 

DepotFolder.Read 

DepotGroup.Read 

DepotGroup.Write 

ComponentGroup.Read

PatchingJob.Create 

DepotFolder.Write 

DepotGroup.Write 

DepotGroup.Modify

Server.Read

PatchingJob.Modify 

DepotFolder.Modify

DepotGroup.Modify

ComponentTemplate.Read

DeployJob.*

PatchingJob.ModifySchedule 

JobFolder.Read 

ComponentTemplate.Read

Component.Read

BatchJob.*

PatchingJob.ModifyTargets 

JobFolder.Write

Component.Read

DepotFile.*

ACLTemplate.*

PatchingJob.Execute

JobGroup.Read 

DepotFile.*"

ConfigFile.*

BLPackage.Read 

PatchRemediationJob.Read 

JobGroup.Write

ConfigFile.*

ConfigurationObjectClass.*

BLPackage.Write 

PatchRemediationJob.Create 

Server.Read 

ConfigurationObjectClass.*

DeregisterConfigurationObjects.*

BLPackage.Modify

PatchRemediationJob.Modify 

Server.Discover

DeregisterConfigurationObjects.*

DistributeConfigurationObjects.*

JobFolder.Read 

PatchRemediationJob.ModifySchedule 

ServerGroup.Read

DistributeConfigurationObjects.*

ExecutionTask.*

JobFolder.Write

PatchRemediationJob.ModifyTargets 

 

ExecutionTask.*

NSHScript.*

DepotFolder.Read 

PatchRemediationJob.Execute

 

NSHScript.*

PropertyClass.*

DepotFolder.Write 

PatchDownloadJob.Read 

 

PropertyClass

PropertyInstance.*

DepotFolder.Modify

PatchDownloadJob.Create 

 

PropertyInstance.*

Repeater.*

DepotGroup.Read 

PatchDownloadJob.Modify 

 

Repeater.*

Server.Read

DepotGroup.Write 

PatchDownloadJob.ModifySchedule 

 

Server.Read

ServerGroup.*

DepotGroup.Modify

PatchDownloadJob.ModifyTargets 

 

ServerGroup.*

DiscoveryJob.*

JobFolder.Read 

PatchDownloadJob.Execute

 

DiscoveryJob.*

CustomCommand.Read 

JobFolder.Write

NSHScriptJob.Read

 

CustomCommand.Read 

CustomCommand.Create 

JobGroup.Read 

NSHScriptJob.Create 

 

CustomCommand.Create 

CustomCommand.Modify

JobGroup.Write

NSHScriptJob.Modify 

 

CustomCommand.Modify

CustomSoftware.Read 

ServerGroup.Read 

NSHScriptJob.ModifySchedule 

 

CustomSoftware.Read 

CustomSoftware.Create 

ServerGroup.Write

NSHScriptJob.ModifyTargets 

 

CustomSoftware.Create 

CustomSoftware.Modify

CustomSoftware.Read 

NSHScriptJob.Execute

 

CustomSoftware.Modify

HPUXSoftware.Read 

CustomSoftware.Create 

DiscoveryJob.Read 

 

HPUXSoftware.Read 

HPUXSoftware.Create 

CustomSoftware.Modify

DiscoveryJob.Modify 

 

HPUXSoftware.Create 

HPUXSoftware.Modify

LinuxSoftware.Read 

DiscoveryJob.Modify 

 

HPUXSoftware.Modify

LinuxSoftware.Read 

LinuxSoftware.Create 

DiscoveryJob.ModifyTargets 

 

LinuxSoftware.Read 

LinuxSoftware.Create 

LinuxSoftware.Modify

DiscoveryJob.Execute 

 

LinuxSoftware.Create 

LinuxSoftware.Modify

AIXPatchSoftware.Read 

DiscoveryJob.Delete

 

LinuxSoftware.Modify

AIXSoftware.Read 

AIXPatchSoftware.Create 

JobFolder.Read 

 

AIXSoftware.Read 

AIXSoftware.Create 

AIXPatchSoftware.Modify

JobFolder.Write

 

AIXSoftware.Create 

AIXSoftware.Modify

SolarisSoftware.Read 

JobGroup.Read 

 

AIXSoftware.Modify

AIXPatchSoftware.Read 

SolarisSoftware.Create 

JobGroup.Write

 

AIXPatchSoftware.Read 

AIXPatchSoftware.Create 

SolarisSoftware.Modify

DepotFolder.Read 

 

AIXPatchSoftware.Create 

AIXPatchSoftware.Modify

WindowsSoftware.Read 

DepotFolder.Write

 

AIXPatchSoftware.Modify

SolarisSoftware.Read 

WindowsSoftware.Create 

ComponentTemplateFolder.Read

 

SolarisSoftware.Read 

SolarisSoftware.Create 

WindowsSoftware.Modify

ComponentTemplateGroup.Read

 

SolarisSoftware.Create 

SolarisSoftware.Modify

 

ComponentGroup.Read

 

SolarisSoftware.Modify

WindowsSoftware.Read 

 

DepotFolder.Read 

 

WindowsSoftware.Read 

WindowsSoftware.Create 

 

DepotFolder.Write 

 

WindowsSoftware.Create 

WindowsSoftware.Modify

 

DepotFolder.Modify

 

WindowsSoftware.Modify

 

 

DepotGroup.Read 

 

 

 

 

DepotGroup.Write 

 

 

 

 

DepotGroup.Modify

 

 

 

 

ComponentTemplate.Read

 

 

 

 

Component.Read

 

 

 

 

DepotFile.*

 

 

 

 

ConfigFile.*

 

 

 

 

ConfigurationObjectClass.*

 

 

 

 

DeregisterConfigurationObjects.*

 

 

 

 

DistributeConfigurationObjects.*

 

 

 

 

ExecutionTask.*

 

 

 

 

NSHScript.*

 

 

 

 

PropertyClass.*

 

 

 

 

PropertyInstance.*

 

 

 

 

Repeater.*

 

 

 

 

Server.Read 

 

 

 

 

Server.Discover

 

 

 

 

ServerGroup.*

 

 

 

 

DiscoveryJob.*

 

 

 

 

CustomCommand.Read 

 

 

 

 

CustomCommand.Create 

 

 

 

 

CustomCommand.Modify

 

 

 

 

CustomSoftware.Read 

 

 

 

 

CustomSoftware.Create 

 

 

 

 

CustomSoftware.Modify

 

 

 

 

HPUXSoftware.Read 

 

 

 

 

HPUXSoftware.Create 

 

 

 

 

HPUXSoftware.Modify

 

 

 

 

LinuxSoftware.Read 

 

 

 

 

LinuxSoftware.Create 

 

 

 

 

LinuxSoftware.Modify

 

 

 

 

AIXSoftware.Read 

 

 

 

 

AIXSoftware.Create 

 

 

 

 

AIXSoftware.Modify

 

 

 

 

AIXPatchSoftware.Read 

 

 

 

 

AIXPatchSoftware.Create 

 

 

 

 

AIXPatchSoftware.Modify

 

 

 

 

SolarisSoftware.Read

 

 

 

 

SolarisSoftware.Create 

 

 

 

 

SolarisSoftware.Modify

 

 

 

 

WindowsSoftware.Read 

 

 

 

 

WindowsSoftware.Create 

 

 

 

 

WindowsSoftware.Modify

 

 

 


Partial permissions

If a checkbox is not automatically selected, the role you have designated in the BSA Role Name field does not have all the permissions necessary to perform all the capabilities associated with a particular type of operation. You can still select the check box to grant this security group permission to perform the operation, but the security group will be limited by the permissions granted in BMC Server Automation. 

For example, you may specify a role that has permissions to run Compliance jobs in BMC Server Automation but does not have permissions to run remediation operations when a compliance failure is detected. In this situation, the check box for Compliance is not selected automatically. You should select the check box to grant this portal security group the same set of compliance functionality available in BMC Server Automation. If you do not select the check box, this portal security group cannot run any Compliance operations in the portal.

You can view a spreadsheet that lists recommended minimum BMC Server Automation permissions needed to perform certain types of actions, such as Compliance job execution or patch remediation. The list of permissions are recommendations only. You may discover situations that require additional permissions.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC BladeLogic Portal 1.2