Controlling user access by assigning permissions to menu elements

You can assign permissions to the application Shell menu elements, such as menu groups and menu items, while customizing the applications in BMC Helix Innovation Studio. 

For example, if you assign permissions to the Administrator group for an application Shell menu element, only those users belonging to the Administrator group, such as IT Helpdesk Administrators, can see and access the Shell menu element. Users who are not a part of the Administrator group, such as IT helpdesk agents, cannot access the application Shell menu element.

The following image provides additional information about assigning access permissions to application Shell menu elements:

To assign permissions to Shell menu elements

1. Log in to BMC Helix Innovation Studio and navigate to the Workspace tab.
2. Select the application that you want to modify.
   The application details are displayed.
3. From the application, click Navigation.The Application shell is displayed.

4. From the Shell Navigation section, select the Shell menu element for which you want to control access.

   You can select any one of the following Shell menu element:

   Shell menu element	Description	Example
   Menu	Combines one or more menu items into a group. You can add the menu to the navigation bar and add menu items in the menu.	The following image shows an example of a menu:
   Menu item	Launches an action in a navigation bar, such as navigating to a view, navigating to a state, or launching a URL.	The following image shows menu items within the About menu group:
   Action	Launches an action in a navigation bar, such as navigating to a view, navigating to a state, or launching a URL.	The following image shows an example of an action icon:

5. From the Settings tab of the Properties pane, click Edit beside Permissions as shown in the following image:

6. In the Edit Permissions dialog box, specify the user permissions by providing the following information:

   Field	Description
   Type	Specify whether you want to assign permissions to a user group or user role. A user can access the Shell menu element if a group the user is in has access, or a role mapped to such a group has access. You can provide permissions for any of the following user profiles: Group: Provides access to user groups based on a common profile. For example, assigning permission to Administrator user group. Role: Provides access to user roles for specific applications. Application roles are permissions similar to groups, except that they belong to a particular application instead of a particular server. Application roles are used exclusively in deployable applications. For more information, see Creating-and-modifying-application-roles.
   Role/Group	Select the user group or user role to which you want to assign access permissions. Only those users who belong to the selected group or role can view and access the Shell menu elements.

   The following image shows the Edit Permissions dialog box for Administration menu group:
   

7. Click Save to save the changes made for the application. The permissions are assigned to the Shell menu elements. 

When end-users access the deployed application, those who belong to the Administrator user group, such as IT helpdesk administrators can view and access the Administration menu element as shown in the following image:

End-users who do not belong to the Administrator user group, such as IT helpdesk agents cannot see the Administration menu element. These end-users can see other elements as shown in the following image: