Unsupported content This version of the documentation is no longer supported. However, the documentation is available for your convenience. You will not be able to leave comments.

Setting up authorizations

In the RBAC Manager folder the Authorizations node lets you set up system and command authorizations.

A system authorization is a permission to perform a specific class of actions in BMC Server Automation. For example, the DepotGroup.Create authorization lets you create depot groups while the DepotGroup.* authorization lets you perform any type of action related to depot groups. For a full listing of all possible system authorizations, see System-authorizations. In the RBAC Manager folder, the only action you can take to set up a system authorization is to specify how the authorization is used to generate an audit trail.

A command authorization is a permission to perform a specific Network Shell or nexec command. An nexec command is a command that is not native to Network Shell. Commands linked to nexec are described using the format (nexec)command such as (nexec)arp. A standard BMC Server Automation installation includes default nexec commands. You can also add and delete custom nexec commands. A custom nexec command can consist of actions that can be executed using the Network Shell nexec command, including scripts stored on remote servers.

Using the Authorization node, you can perform the following procedures:

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*