Permission mapping overview for BMC Helix Knowledge Management by ComAround
Knowledge permissions are defined differently in your BMC application and . The mapping process bridges these structural differences. As a result, users continue to have access to articles in based on their knowledge permissions as defined in your BMC application.
How knowledge permissions are defined
The following table describes how knowledge permissions are defined in the applications:
Application | Knowledge permissions |
|---|---|
The knowledge permissions are defined by support groups and the users' Knowledge-Centered Service (KCS) roles. Support groups are set by assignment groups and one or more additional visibility groups, if necessary. | |
The knowledge permissions are defined by support groups and the users' KCS roles. Support groups are assigned to knowledge sets. Then, knowledge sets are assigned to articles. For more information about associations between knowledge sets, companies, lines of business, and support groups, see Creating knowledge sets and knowledge templates. | |
BMC Helix Digital Workplace Advanced | The knowledge permissions are defined by the users' KCS roles. |
BMC Helix Virtual Agent | |
The knowledge permissions are defined by the user groups assigned to the portal or folders. A user can be assigned to more than one user group, but each user group has a single KCS role. Important: Only 64 user groups can be created in . |
How user roles are defined
To grant the role to a user in your BMC application, administrators assign KCS roles by using the fields under Application Permissions and IS Persona tabs on the CTM:People form. Therefore, a user can have multiple KCS roles selected on the CTM:People form. Learn how to add People data in Creating and modifying People data.
determines the highest-level KCS role selected for a user under Application Permission and IS Personas tabs on the CTM:People form. Then, this KCS role is assigned to the user in
. For more information about KCS roles in
, see Knowledge-Centered Service overview. For
users,
also accounts for assigned functional roles. To understand how
determines the user's highest-level KCS role based on functional roles, see How KCS roles are defined for BMC Helix Business Workflows users.
How knowledge permissions are mapped
The mapping of knowledge permissions is based on the mapping of support groups from or to user groups (and its link with portals or folders).
After support groups are mapped with user groups, knowledge permissions assigned to articles in or are mapped to folders to which user groups are assigned. The synchronization of knowledge articles is based on the original permission settings in or . Learn more about the synchronization process in Synchronizing-BMC-applications-with-BMC-Helix-Knowledge-Management-by-ComAround.
BMC Helix Digital Workplace Advanced or BMC Helix Virtual Agent users are not assigned to any support groups. Therefore, you cannot map specific support groups from BMC Helix Digital Workplace Advanced or BMC Helix Virtual Agent to
. However, you can map companies to which these users belong in BMC Helix Digital Workplace Advanced or BMC Helix Virtual Agent to
user groups.
While mapping companies or support groups to user groups, you must consider the KCS roles of the users. Select the user group that corresponds to the highest-level KCS role assigned to the user on the CTM:People form. Learn how
determines the user's KCS role in How user roles are defined. When you complete the mapping, users can view published knowledge articles based on their highest-level KCS roles.
How unrestricted access works in
Some users require access to all companies. For example, someone working in Global Support or a Help Desk manager may require access to multiple companies despite belonging to a single company only. In such cases, the administrator can provide users with unrestricted access to all companies. This permission is granted on the CTM: People form located in the Application Administration Console. To learn how to enable this level of access, see the section To grant a person unrestricted access to all companies in Granting people access to companies.
After the companies that a user has unrestricted access to and their support groups are mapped to user groups in , the user is assigned to all user groups from both the company level and the support group level in .