Configuration Management security

Configuration Management security areas

The security areas for Configuration Management are Configuration Item and Configuration Management Configuration. These areas contain the default security rights and settings for the Configuration Management module. The security right settings will be inherited by any new roles created in an area when no other settings are specified for that security role.

These security areas are used to set permissions to operators to provide access to particular area of Configuration Management. The following table lists the areas and the relevant Configuration Management menu items the operators can access.

Area	System Navigator menu items for this area
Configuration Item	This area contains the default security rights and settings for Configuration Item. The rights will be copied to new roles created for this area. However, the settings will only be inherited if there are no settings specified on the Role.
Configuration Management Configuration	This area contains the default security rights and settings for Configuration Management configuration. The rights will be copied to new roles created for this area. However, the settings will only be inherited if there are no settings specified on the Role. Note When you set the security rights for a security role in the Configuration Management Configuration area: The View right is to view the settings defined in the Administration menu and the Configuration menu. The Update right is to update the values of existing settings defined in the Administration menu and the Configuration menu. The New and Delete rights are to create and delete a setting in the Configuration menu. The Admin right is to add, edit, or delete the settings in the Administration > Settings menu.

Default rights

The default rights defined in areas will be inherited when you create new security roles. The following table shows the out-of-box default rights defined in the Configuration Item and Configuration Management Configuration areas.

Area Name	View	New	Update	Delete/Close	Expert	Admin
Configuration Item	TRUE	FALSE	Never	Never	FALSE	FALSE
Configuration Management Configuration	FALSE	FALSE			FALSE	FALSE

Default settings

The default settings defined in areas will be inherited when you create new security roles. In an out-of-box system, none of the default settings is checked or set in the Configuration Item and Configuration Management Configuration areas.

Configuration Management security roles and settings

The out-of-box security roles for the Configuration Management module include the following:

• Configuration Administrator
• Configuration Auditor

Out-of-box role rights

Based on the mapping rules, the rights and settings in previous security profiles are mapped to the rights and settings in the Configuration Management area specified in the corresponding security roles. See the table below for the out-of-box security rights in the Configuration Item and Configuration Management Configuration areas. This table only lists the new security roles that have different settings with the default rights.

Area Name	Role Name	View	New	Update	Delete/Close	Modify Template	Expert	Admin
Configuration Item	Configuration Administrator	TRUE	TRUE	Always	Never	FALSE	FALSE	FALSE
	Configuration Auditor	TRUE	TRUE	Always	Never	FALSE	FALSE	FALSE
Configuration Management Configuration	Configuration Administrator	FALSE	FALSE	Never	Never	FALSE	FALSE	FALSE
	Configuration Auditor	FALSE	FALSE	Never	Never	FALSE	FALSE	FALSE