Typical combination of permissions
Typically, you assign permissions combinations to the users in your IT organization based on their roles and responsibilities. The combinations suggested in the following table are defined by ITIL as typical roles and permissions.
The following table is organized by application, role, and the permissions combination recommended for the role.
Application | Role | Permissions combination |
|---|---|---|
Asset Management | Configuration Administrator |
Optional permissions
|
Purchasing Agent |
| |
Change Management | Change Approver |
Functional role required You must assign the following functional role to the user in addition to the permissions:
Important: You can give this functional role to anyone who approves changes. It applies to all roles. |
Change Coordinator |
Functional role required You must assign the following functional role to the user in addition to the permissions:
| |
Change Manager |
Functional role required You must assign the following functional role to the user in addition to the permissions:
| |
Customer Representative |
| |
Release Management | Release Coordinator |
Functional role required You must assign the following functional role to the user in addition to the permissions:
|
Incident Management | Service Desk Analyst |
|
Specialist |
| |
Group Coordinator |
Important: You can give a user Master permissions if full access to incidents is required.
Important: You can give a user Master permissions if they need full access to Problems, Known Errors, or Solutions.
| |
Operator |
| |
Operations Manager |
| |
On-Duty Manager |
| |
Problem Management | Problem Coordinator |
Important: You can give a user Master permissions if they need full access to Problems, Known Errors, or Solutions.
Functional Role You must assign the following functional role to the user in addition to the permissions:
|
Service Level Management | Service Level Administrator |
|
Service Level Manager |
| |
Service Owner |
|
When you assign permissions, it is important to use only the minimum number of permissions that allow the person to perform their job. BMC strongly recommends that you have only one set of permissions combinations for any given role. There are only a few key permissions that a general application user needs to perform their duties. For more information about these key permissions, see Permission-groups-hierarchy and Roles-and-permissions.