User Access Permissions

CA EEM independently manages the access to an application. You can assign a user with different permissions to access different applications. To define user permissions, create a scoping policy for each application with required permissions. The following table specifies the available user permissions to manage CA EEM:
caeem
CA EEM independently manages the access to an application. You can assign a user with different permissions to access different applications. To define user permissions, create a scoping policy for each application with required permissions. The following table specifies the available user permissions to manage CA EEM:
Task
Scoping Policy Resource
Scoping Policy Action
Attach to an application
ApplicationInstance
read
Add, Modify, or Delete an Application
ApplicationInstance
read, write
View AppObjects
AppObject
read
Add, Modify, or Delete an AppObject
AppObject
read, write
View an Application User
User, iPoz
read
Add, Modify, or Delete an Application User
User
iPoz
read, write
read
View a Global User
GlobalUser, iPoz
read
Add, Modify, or Delete Global User
GlobalUser
iPoz
read, write
read
View an Application Group
UserGroup, iPoz
read
Add, Modify, or Delete an Application Group
UserGroup
iPoz
read, write
read
View a Global Group
GlobalUserGroup, iPoz
read
Add, Modify, or Delete a Global Group
GlobalUserGroup
iPoz
read, write
read
View a Calendar
Calendar
read
Add, Modify, or Delete a Calendar
Calendar
read, write
View a Policy
Policy
read
Add, Modify, or Delete a Policy
Policy
read, write
View an Application Folder
Folder
read
Add, Modify, or Delete an Application Folder
Folder
read, write
View a Global Folder
GlobalFolder
read
Add, Modify, or Delete a Global Folder
GlobalFolder
read, write
View a Server Configuration
iPoz
read
Add, Modify, or Delete a Server Configuration
iPoz
read, write
Perform Certificate Validation
CertificateValidation
read
By default, EiamAdmin has all the permissions to manage the CA EEM server.