User Management in CA APM Command Center

Configure CA APM Command Center and CA Application Performance Management (APM) to share users. After you configure this capability, manage users and user groups, and assign them to specific roles in the User Management tab of Command Center. Use User Management to find users and user groups in APM or other external directories, such as LDAP. You can also add new users without accounts in APM or LDAP. The assigned roles control user access in Command Center. Change permissions for users in Command Center, and delete them as necessary. View the role and permissions that are assigned to a specific user in the User and Group list. Only administrators and users who are assigned access can see the User Management tab in Command Center.
apmdevops106
Configure CA APM Command Center and CA Application Performance Management (APM) to share users. After you configure this capability, manage users and user groups, and assign them to specific roles in the User Management tab of Command Center. Use User Management to find users and user groups in APM or other external directories, such as LDAP. You can also add new users without accounts in APM or LDAP. The assigned roles control user access in Command Center. Change permissions for users in Command Center, and delete them as necessary. View the role and permissions that are assigned to a specific user in the User and Group list. Only administrators and users who are assigned access can see the User Management tab in Command Center.
The user management roles do not provide complete permissions to any one role. Set up users only if you intend to have more than one user in Command Center. If you are the only user in your company in Command Center, do not set up User Management in Command Center.
The permissions for each role:
View/Modify Access
AgentView
AgentAdmin
ContentAdmin
ProductAdmin
Modify Agent Configuration
no
yes
no
no
Request Agent Report
yes
yes
yes
no
View Agent Reports
yes
yes
yes
no
Create Package
no
no
yes
no
Modify Package
no
no
yes
no
Delete Package
no
no
yes
no
Push Package
no
yes
no
no
Import Bundle
no
no
no
yes
Delete Bundle
no
no
no
yes
Assign Roles to Users
no
no
no
yes
Controller Upgrade
no
no
no
yes
Use REST API
no
no
yes
yes
Cluster Upgrade
no
no
no
yes
Log In and View
yes
yes
yes
yes
RDI permissions display in the 
User Management
 tab, but have no effect in the current configuration.
3
Add New Users or User Groups
Add users and user groups in APM to Command Center. Users in APM appear in the drop-down list when you search for them. Validate users who are in external directories, such as LDAP, by clicking the
magnifying glass
icon. You can also add new users who are not in APM or LDAP. 
New user accounts remain inactive until you create the user account in APM or in an external user directory, such as LDAP.
Users already added to Command Center do not display in the search. 
Follow these steps:
  1. Click
    User Management
     in Command Center.
  2. To add a new user or user group, click
    Add New
    .
    The
    Grant Access to User or Group
    dialog opens.
  3. To search for the user, type the user or group name.
    A drop-down list appears of existing users and user groups in APM. In the drop-down list, an option also appears to add a user who is not found in the APM realm.
    • (Optional) To validate whether the user is in an external directory of APM, click the
      magnifying glass
      icon.
      A tooltip appears that validates whether the user is in APM.
    • Click
      Add <name>
      to add a user that is not found in APM.
    • Select
      User
      or
      Group
      for the new user.
    • Select the
      Role
      that you want to assign the user to, and click
      Save
      .
  4. Select the relevant user.
    The dialog populates the user Name and Type.
  5. (Optional) If you select an incorrect user, click the
    Trash
    icon or
    Reset
    to remove that user from the dialog form.
  6. Select the
    Role
    that you want to assign the user to.
    The permissions that are assigned to that role appear.
  7. To save the user role, click
    Save
    .
You assigned a user permissions in Command Center.
Edit Users or User Groups
Edit previously added users and user groups in Command Center. Select a user or user group to view the assigned Role and Permissions. Only users who are already added in Command Center can be edited.
Follow these steps:
  1. Click
    User Management
     in Command Center.
  2. Select the user that you want to change from the list of users, and click
    Edit
    .
  3. Select another
    Role
    from the drop-down list, and click
    Save
You assigned the user to a different role.
Delete Users or User Groups
When a user or user group no longer needs access to Command Center, delete the user.
Follow these steps:
  1. Click
    User Management
     in Command Center.
  2. Select the user that you want to change from the list of users, and click
    Delete
    .
    A confirmation dialog appears.
  3. Click
    Confirm
    to delete the user.
    A confirmation message confirms that you deleted the user or user group.