Setting Device Level Permissions
Device level permissions determine the actions that the user or group
is able to complete on a device and its details. Although the user or
group (as a whole) has permissions set up to the group, the permissions
per device are set up
individually.
The device setup is a two-part task:
- Selecting the devices the user or group is to have access to
- Setting the permissions explicitly for the device
Prior to setting device level permissions,
keep in mind that device level permissions
override
all other permission
levels.
First step: To assign devices for user or group access,
- From the menu bar, accessTools->System Administration. The System Administration window opens.
- In the navigation pane, expandGlobal->User Management.
- SelectSystem Groups. The right pane contains all available groups.
- Select a group, then clickPermissions. The Access Control Administration - [User ID or Group Name] window opens.
- In the tree menu, selectDevice Permissions. The right pane populates only if the user or group has been given permissions to other devices.
- ClickManage. The Select Device Resource window opens.
- In the Resource Available column, select theDevicesto which the user or group are to have permissions.
- ClickAdd. The selected devices are moved to the Resources Selected column.A sequence of devices can be selected by holding down the Shift key while selecting devices. Or... Multiple, non-sequential devices can be selected by holding the Ctrl key while selecting devices.
- Repeatsteps 7 and 8for each device to which access is required.
- If a user requires access to all devices , without making a selection, clickAdd All.
- When finished, clickOK. The Select Device Resource window closes.
The right pane reflects the devices that were selected in the Select
Device Resource window. You can now select the
explicit
device permissions
for the group.
Second step: Set device level permissions,
- In the navigation pane, expand theDevice Permissionsfolder. The devices listed are the same devices that were just selected in the Select Device Resource window.
- Select aDeviceby double-clicking on the device name. The right pane populates with the Set permissions for [device name] options.
These options represent the permissions that the user or group have for this specific device. There are two sections in the area:- All permissions in both areas
- One or more permissions from each area
- Permissions from only one area
- To select all options in an area, click thecheck boxnext to Device or Job.Or, to provide select options in each section, click the check box next to the required options.
- To provide the user or group with all device permissions, clickSelect All. All options are checked. (This action can be reversed by clicking the De-select All button.)
- When you have selected the appropriated options, clickApplyat the bottom of the window. The Access Control Administration - [User ID or Group Name] window closes.
- Repeat the above steps for each device.
Device | The Device section provides permissions for access to the config to
Edit, View device passwords, View details, and Update the OS of the device.
It also allows permissions for Assign Credentials, work with Run Non-scheduled
tasks, and complete Run Cut-Throughs.
|
Job | The Job section provides the user or group with permission to Schedule
and/or Approve jobs for the device.
|
The user or group can be assigned to:
If you have assigned
a device to a user or group to manage, the user or group is unable to
complete any tasks specific to the device until you have
set
the explicit permissions.