CMDB roles provide levels of permission to CMDB users in the same way as regular FootPrints roles, except that these roles apply to CMDB users only. The three basic role properties are:
Read-only—Can view CMDB data, but cannot create CIs, edit CIs, or perform any CMDB administration tasks.
Create/Edit—Can create and edit CIs, but cannot perform any CMDB administration tasks.
Administrator—Can create CIs, edit CIs, and perform all CMDB administration tasks.
Administrators can also create new CMDB roles that include different combinations of creating and editing CIs and administering the CMDB. CMDB Roles can be created with a great deal of granularity to their permissions.
Edit CMDB Role Properties
To edit CMDB role properties:
From the CMDB homepage, select Administration | Roles. The CMDB Roles page is displayed.
Select a role from the drop-down field and click the Edit role button. The Properties page is displayed. Edit the fields as needed:
Select as default role—Unless otherwise specified, all users who are given access to a CMDB workspace have the role that is designated as the Default Role. By default, Read-Only is the default role in a CMDB Workspace. If you edit, for example, the Create/Edit role and check the "Select as default role" checkbox, all agents who have access to that Workspace have Create/Edit permissions unless they are specifically given another role. This checkbox is provided to make it easier when creating agents so that the administrator does not have to specify a CMDB role for every agent who is given access to the Workspace.
Members—Highlight user IDs in the All CMDB Users field and then click the Add button to specify the role property for the highlighted users. When you click the Add button, the user IDs are displayed in the Role Members field. Highlight user IDs in the Role Members field and then click the Remove button to remove users from that role. If a user is removed from a role, that user still has access to the CMDB Workspace, but his or her role is changed to the Default Role.
Create CIs—Enable or disable permission to create CIs for this role using the radio buttons.
Edit CIs—Enable or disable permission to edit CIs for this role using the radio buttons.
CMDB Administration—Enable or disable permission to perform CMDB administration tasks for this role using the radio buttons.
Enter your password and click the SAVE button. The role properties are saved.
Create a CMDB Role
To create a new CMDB role property:
From the CMDB homepage, select Administration | Roles. The CMDB Roles page is displayed.
Click the Create a new role button. The Create New Role page is displayed.
Enter a name for the new role in the Role Name field, then click the GO button. The Properties page is displayed. Edit the fields as needed:
Select as default role—Unless otherwise specified, all users who are given access to a CMDB workspace have the role that is designated as the Default Role. By default, Read-Only is the default role in a CMDB Workspace. If you edit, for example, the Create/Edit role and check the "Select as default role" checkbox, all agents who have access to that Workspace have Create/Edit permissions unless they are specifically given another role. This checkbox is provided to make it easier when creating agents so that the administrator does not have to specify a CMDB role for every agent who is given access to the Workspace.
Members—Highlight user IDs in the All CMDB Users field and then click the Add button to specify the role property for the highlighted users. When you click the Add button, the user IDs are displayed in the Role Members field. Highlight user IDs in the Role Members field and then click the Remove button to remove users from that role. If a user is removed from a role, that user still has access to the CMDB Workspace, but his or her role is changed to the Default Role.
CMDB Administration—Enable or disable permission to perform CMDB administration tasks for this role using the radio buttons. Administration permissions enable access to the Administration button and functions from the CMDB Toolbar.
CI Permissions—The Permissions for CIs wizard allows you to specify whether this CMDB role can View, Create, Edit, and Delete CIs, and breaks down those permissions further by allowing you to specify the level of access to each CI Type for each Status. This provides a great degree of granularity in controlling access for users.
Show CI Types—Click only on the CI Types for which you want to administer permission. This is a multi-select field, so you can choose multiple CI Types to be displayed. When you change the selections, the fields in the Permissions Matrix below change to show only the selected CI Types.
Show Operations—Click only on the Operations (View, Create, Edit, and Delete) for which you want to administer permission. This is a multi-select field, so you can choose multiple Operations to be displayed. When you change the selections, the fields in the Permissions Matrix below change to show only the selected Operations.
Permissions Matrix—A checkmark in the Select All checks all of the checkboxes in the matrix. A checkmark in the box beside a CI Type checks all of the boxes in that row. A checkmark in the box beside a Status checks all of the checkboxes in that column.
Attribute Permissions—The Permissions for Attributes wizard allows you to specify whether this CMDB role can View, Create, Edit, and Delete Attributes, and breaks down those permissions further by allowing you to specify the level of access to each Attribute for each Status. This provides a great degree of granularity in controlling access for users.
Show Attributes—Click only on the Attributes for which you want to administer permission. This is a multi-select field, so you can choose multiple Attributes to be displayed. When you change the selections, the fields in the Permissions Matrix below change to show only the selected Attributes.
Permissions Matrix—A checkmark in the Select All checks all of the checkboxes in the matrix. A checkmark in the box beside Read and/or Edit checks all of the checkboxes in that column.
Enter your password and click the SAVE button. The role properties are saved.
Delete CMDB Role Properties
To delete a CMDB role property:
From the CMDB homepage, select Administration | Roles. The CMDB Roles page is displayed.
Select the role that you want to delete from the drop-down box.
Click the Delete button. The Delete Role page is displayed.
Confirm the deletion by entering your password and clicking the SAVE button. The role is deleted.