Assigning global roles to users


You can assign global roles to PAM users to control their level of access to all PAM projects.

To assign a user a global role

Provide the user READ access to at least one of the following global resource profiles:

Global resource profileRole
BMC.RSS.PAM

The user can log on to PAM without any global role or access level assigned.

BMC.RSS.PAM.USERRequester
BMC.RSS.PAM.MANAGERManager
BMC.RSS.PAM.VIEWViewer
BMC.RSS.PAM.ADMINAdmin

Where to go from here

After you assign a user a global role (based on the user's access to a global resource profile), you can restrict the user's access to specific projects by assigning them a project-level role (based on the user's access to a project-level resource profile). To assign a user a project-level role, see Assigning a project-level role.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC AMI Security Privileged Access Manager 2.3