Enabling elevated dashboard access


Leadership team members in an organization often require broad visibility into operational data to make strategic, informed decisions. However, granting direct access to them to view BMC Helix application data might not be feasible due to administrative overheads and security restrictions.

To resolve this issue, you can use a secure impersonation model through a dedicated user. This approach simplifies permission management and ensures that leadership team members always have complete and consistent reporting across BMC Helix ITSM, BMC Helix Operations Management, and other BMC Helix data sources.

Scenario

Scenario
Jordan is an administrator at Apex Global. The Enterprise Reporting team of Apex Global needs to visualize and analyze incident and event data in dashboards. However, this team cannot be granted direct access to this data due to security restrictions.

To resolve this issue, Jordan creates a user group and adds these team members to it. He also creates a dedicated user and grants the necessary rights to access incident and event data. He then opens a support ticket, providing the group and user details to grant the group access.

After gaining access, members of the Enterprise Reporting team can view incident and event data in dashboards for analysis and troubleshooting.

Workflow to enable dashboard data access

Workflow to steps for granting elevated dashboard access

To enable dashboard data access

  1. To create a user group and add users to the group:
    1. Log in to BMC Helix Portal as a tenant administrator.
    2. Select User access > User group.
    3. Click Add group.
    4. Specify a group name.
    5. From the Users list, select the users that you want to add to the group.
      You must add users whom you want to grant access to the required BMC Helix applications' data in dashboards.
  2. To grant the Reporting Access role to the user group:
    1. Select User access > Roles and permissions.
    2. From the Actions list corresponding to Reporting Access, click Edit.
    3. In the Groups list, click Select.
    4. Select the group and click Confirm.
      A confirmation message is displayed.

      A user group in Portal
       
  3. To verify that this user group is available in BMC Helix Dashboards:
    1. Open BMC Helix Dashboards.
    2. In the left pane, expand Users and access > Teams.
    3. Verify that the user group is displayed.

      The team in dashboards
       
  4. To create a dedicated user with the required permissions in BMC Helix applications to read data.
    Example:
    1. Create a licensed user in BMC Helix ITSM and grant the required permissions to the user. 
    2. Make sure that the user is synced to BMC Helix Portal.
    3. Log in to any other BMC Helix application you want to use.
    4. Use the role-based access of the BMC Helix application to grant the required permissions to the user.
  5. Open a support ticket and include the group and user details.
    The BMC Helix DevOps team enables this feature and grants the required privileges to access data.

Results

All members of the user group can now view and access BMC Helix application data in dashboards.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC Helix Dashboards 26.1