Managing security roles


As an administrator, you can manage security roles. Roles control the access rights to  functions. By default, a number of roles are provided to cover most situations. However, you can customize the existing roles or create new roles to suit your security needs.

Product roles and rights

The following table lists the default roles and the functions to which they have access or the ability to use.

Product

Default role

Function

 ()

 Administrator

Access to  configuration settings for Database, Host Connections, Certificates, Issue Tracking, Licensing, Personal Access Tokens, Update Center, Security, Web Server, and Webhooks.

Super Admin

Access to administrative functions for all BMC AMI Products for Web

Personal Access Tokens Administrator

Ability to add, edit, and delete Personal Access tokens

Workbench Team Profile Exporter

Ability to export Workbench team profiles to any group of which they are a member

Workbench Team Profile Administrator

Ability to view, add, and delete Workbench team profiles for all groups

 Administrator

Ability to use the functions in  Administration to configure and control access to  content, such as:

  • Submit Strobe Measurements
  • Strobe Administration
  • Use Performance Tracker
  • Folder Creation
  • Folder Management
  • Strobe Insight Reports Access

 Performance Tracker

Access to use the  Performance Tracker function

 User

Access to Submit Strobe Measurements and Folder Creation in 

 Administrator

Access to manage  server connections for use in the  Web Interface, and access to  Administrator Area (until this is removed)

 User

Access to the  Web Deployment application, and to the  Mobile and Web applications.

 Approver

Access to the  Mobile and Web applications

Abend-AID

Abend-AID Administrator

Access to Abend-Aid web UIs.

 (TJP)

WarningSome content is unavailable due to permissions.

User

Full access to

WarningSome content is unavailable due to permissions.

 Administrator

Ability to administer the  Web client for components, including permissions to create, read, modify, delete, and execute components.

An administrator has permissions to create, update, and delete all test artifacts in the repository, including connections and environments.

Only selected users should have this role.

 User

Access to the  Web client, and to  and the CLI functions that require information from the repository. Most users who are allowed to use Total Test should have this role.

Access to the  Web client include the ability to create, read, modify, delete, and execute components.

 User

Full access to 

 ()

 User

Full access to 

On the Roles tab, you can view a list of configured roles, including the name of the role and a description of the role. For information about default roles, see Product roles and rights.

On the UI, you can move a column, refresh the table, delete one or more row entries, search and sort the values in the table, and choose how many records you want to view in the table. For more information about these actions, see Common-UI-actions.

You can also perform the following actions:

Purpose

Action

Add a security role and assign rights to it.

Click Add. For more information, see Adding-a-security-role.

Edit a role definition.

Click Edit.pngin the relevant row.


Warning

Important

You cannot edit or remove the  Administrator and the Super Administrator roles.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC AMI Common Enterprise Services 24.05