Before you start
You must have Security Roles setup selected in the Admin tab of your own General Access security role before you can assign or remove permissions for any security roles.
-
Display the Configuration Management Security Roles details window, if it is not already on screen.Select the Menu button
, then Admin, then select System Administration. The System Administration window appears.
In the Explorer pane, expand Security Roles, then select Configuration Management. All existing Configuration Management security roles are displayed.
The pre-defined role All typically has all role options selected. However, some of the options are not selected by default and you should explore the permissions set before assigning the role.
If you want to create a role, select
and assign the role a name in the Role Name field. To view or update a role, select the role in the browse table and select 
. - Assign the global permissions for the security role:
| Disable CMDB Security | Analysts with this role have unlimited access to the CMDB, including the External Resource Search and Federated CMDB Admin options. Select this option to effectively turning off the granular security system for access to the CMDB. All CMDB items will open in edit mode, regardless of other permissions. Leave this deselected to assign specific permissions to the role. |
| External Resource Search |
Analysts with this role can search for CMDB items from the External Resources Search window. Analysts with this permission are restricted to a Cached Resource Search so searches can only return CMDB details that have been imported and not excluded from the Federated CMDB. This option also allows Analysts to view external resource data via the Linked Resources option. |
| Federated CMDB Admin |
Analysts with this role can import CMDB Items from the External Resource Search window. They can also perform a Full Resource Searchto search for Item Details within the CMDB which have not been imported into ASM Core, access the Federated CMDB Administration windows and access and process Discrepancy Reports through the CMDB Item Details Explorer option of the same name. This option is only enabled if External Resource Search is selected. |
- Select the CMDB Items tab if it is not already uppermost.
| CMDB Item Security By Type |
This option is only enabled if the Disable CMDB Security setting is deselected. Use this option to set permissions for this role for selected CMDB Item Types defined in the system. When you select the option, additional fields are displayed, allowing you to specify the CMDB Item Type and assign certain permissions
Beneath the table is a field displaying the selected CMDB type. You can change this by selecting a different CMDB Item Type in the List table. |
||||||
| CMDB Item Advanced Search | This option appears at the top of the tab, to the right of CMDB Security by Type. It enables the Advanced Search option when searching for CMDB items. Analysts with this role can create searches using advanced search functions. |
||||||
| CMDB Item Bulk Update | This option appears at the top of the tab, to the right of CMDB Advanced Search. Analysts with this role can update one or several fields in several configuration items. Select it to enable the CMDB Bulk Update button on the toolbar of the Search CMDB Items search window. Deselect Disable CMDB Security to enable this option.
|
||||||
| Cascade to Child Types | This option appears below the table if CMDB Item Security by Type is selected. Selecting this option cascades the security settings to all child types of the selected CMDB Type. If cleared, permissions must be set for each child type | ||||||
| CMDB Item View | Analysts with this role can search for and view CMDB Items | ||||||
| CMDB Item New | Analysts with this role can create new CMDB Items This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Update | Analysts with this role can update CMDB Item details. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Delete |
Analysts with this role can delete CMDB Item details This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Ref Update | Analysts with this role can modify the CMDB Item’s reference information. Selecting this option also provides access to the versioning functionality. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Title Update | Analysts with this role can modify the title of CMDB Items. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Cancel Lock | Analysts with this role can cancel the lock set on CMDB Items. By default, only one Analyst can update a CMDB Item record at any one time. Selecting this option enables the CMDB Item record to be updated by two or more Analysts simultaneously. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Clone | Analysts with this role can create a copy (clone) of the selected CMDB Item. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Freeze | Analysts with this role can freeze CMDB Items This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Unfreeze | Analysts with this role can unfreeze CMDB Items This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
|
||||||
| CMDB Item Action by Default | Analysts with this role can open CMDB Items in edit mode directly. They do not need to use the Edit button. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Financial View | Analysts with this role can view financial information for CMDB Items on the CMDB Item Details window. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Financial Update | Analysts with this role can update financial information for CMDB Items on the CMDB Item Details window. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Link Update | Analysts with this role can create, edit and delete links between CMDB items. However, it does not give permission to override impact relationship on a link. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected, and CMDB Item Security By Type is selected |
||||||
| CMDB Item Override Link Impact | Analysts with this role can override the impact relationship on link types that allow impact relationships to be overridden when viewing a linked CMDB item. This is set in the CMDB Link Type window. The option must be selected for both Types in the link to allow the override. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Baseline Update | Analysts with this role can create and edit CMDB Items flagged as Baselines. It enables the Baseline checkbox on the CMDB Item Details window. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Template Update | Analysts with this role can create and edit CMDB Items flagged as Templates. It enables the Template checkbox in the CMDB Item Details window This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Object View | Analysts with this role can download and view Objects that are attached to CMDB Items. Objects is a menu option on the CMDB Item Details Explorer window. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Object Update | Analysts with this role can update objects that are attached to CMDB Items. Objects is a menu option on the CMDB Item Details Explorer window. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Object Cancel | Analysts with this role can cancel and ‘override’ a checkout of an object that is attached to a CMDB item and restore the object to its last checked-in state. CMDB Item Object Version Control must be selected in System Settings, and on this window, CMDB Item Object must be selected and Disable CMDB Security and CMDB Security by Type deselected. |
||||||
| CMDB Item Object Delete | Analysts with this role can delete objects that are attached to CMDB Items. Objects is a menu option on the CMDB Item Details Explorer window. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Stakeholders View | Analysts with this role can view stakeholders that are linked to CMDB Items This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Stakeholders Write | Analysts with this role can update details for stakeholders that are linked to CMDB Items This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Cost Center View | Analysts with this role can view Cost Centers that are linked to CMDB Items This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| CMDB Item Cost Center Update | Analysts with this role can update Cost Centers that are linked to CMDB Items This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
|
The following options are only shown for Software Product or Inventory CMDB Item Types (or sub types of these standard CMDB Item Types) : |
|||||||
| View Transactions | Analysts with this role can search for and view asset transactions from the Inventory or Software Product Details and from the Call or Request details. It enables the Bulk Inventory option in the CMDB Item Details window for an inventory product, and Licenses in the CMDB Item Details window for software products | ||||||
| Order/Purchase | Analysts with this role can add orders and purchases for Software Products or Inventory items. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| Reserve/Allocate | Analysts with this role can allocate and reserve items which are On Hand, unallocate items which are In Use, and allocate and delete items which are Reserved | ||||||
| Retire | Analysts with this role can retire items which are On Hand or In Use This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| Transfer | Analysts with this role can transfer items which are On Hand and Transfer Ownership of items which are In Use This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| Change Availability Status | Analysts with this role can Change Availability Status for items which are On Hand This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected. |
||||||
| My Jurisdictions | Analysts with this role can only order, purchase or transfer items using organizations and cost centers (as well as any children defined for each of these) allocated to their own jurisdictions | ||||||
| All Jurisdictions | Analysts with this role can order, purchase or transfer items using any active organizations and cost centers | ||||||
- Select
to save the changes and close the window. Provide the Change Reasons if prompted to do so. Alternatively, select another tab, if appropriate.