Service Level Management security

Service Level Management security areas

The security areas for Service Level Management are Service Level Management and Service Level Management Configuration. These areas contain the default security rights and settings for the Service Level Management module. The security right settings will be inherited by any new roles created in an area when no other settings are specified for that security role.

These security areas are used to set permissions to operators to provide access to particular area of Service Level Management. The following table lists the areas and the relevant Service Level Management menu items the operators can access.

Area	System Navigator menu items for this area
Service Level Management	This area contains the default security rights and settings for SLM. The rights will be copied to new roles created for this area.However, the settings will only be inherited if there are no settings specified on the Role.
Service Level Management Configuration	This area contains the default security rights and settings for SLM configuration. The rights will be copied to new roles created for this area. However, the settings will only be inherited if there are no settings specified on the Role. Note When you set the security rights for a security role in the Service Level Management Configuration area: The View right is to view the settings defined in the Administration menu and the Configuration menu. The Update right is to update the values of existing settings defined in the Administration menu and the Configuration menu. The New and Delete rights are to create and delete a setting in the Configuration menu. The Admin right is to add, edit, or delete the settings in the Administration > Settings menu.

Default rights

The default rights defined in areas will be inherited when you create new security roles. The following table shows the out-of-box default rights defined in the Service Level Management or Service Level Management Configuration areas.

Area Name	View	New	Update	Delete/Close	Expert	Admin
Service Level Management	TRUE	FALSE	Never	Never	FALSE	FALSE
Service Level Management Configuration	FALSE	FALSE	Never	Never	FALSE	FALSE

Default settings

The default settings defined in areas will be inherited when you create new security roles. In an out-of-box system, none of the default settings is checked or set in the Service Level Management or Service Level Management Configuration areas.

Service Level Management security roles and settings

The out-of-box security roles for the Incident module include the following:

• SLM Manager

Mapping between previous security profiles and current PD security roles

The following table lists the mapping relationship between previous Service Level Management security profiles and current PD security roles in the Service Level Management module.

Security Profile	Security Role/Area
DEFAULT	DEFAULT/Service Level Management
administrator	administrator/Service Level Management
sysadmin	sysadmin/Service Level Management

Field mapping between security profiles and PD security rights/settings

For Service Level Agreements, Response Objectives and Availability Objectives

Security profile settings		Process Designer security rights and settings
New	OR	New
Delete	OR	Delete/Close
Update	OR	Update
View	OR	View
Allowed Statuses	AND	Allowed Statuses

SLT Catalog Records

Security profile settings		Process Designer security rights and settings
New   Delete  Update View	OR	Manage SLT Catalog Records

Settings:

Security profile settings	Process Designer security rights and settings
View Monthly Aggregate Results	View Monthly Aggregate Results
View Monthly Response Time Results	View Monthly Process Time Results
View Response Detail Records	View Process Detail Records
View SLA Active Records	View SLM Active Records
View Monthly Availability Results	View Monthly Service Results
View Outage Detail Records	View Outage Detail Records
View Outage Event Records	View Outage Event Records

Out-of-box role rights

Based on the mapping rules, the rights and settings in previous security profiles are mapped to the rights and settings in the Service Level Management area specified in the corresponding security roles. See the table below for the out-of-box security rights in the Service Level Management and Service Level Management Configuration areas. This table only lists the new security roles that have different settings with the default rights.

Area Name	Role Name	View	New	Update	Delete/Close	Modify Template	Expert	Admin
Service Level Management	SLM Manager	TRUE	TRUE	Always	Always	TRUE	TRUE	TRUE
	System Administrator	TRUE	TRUE	Always	Always	FALSE	TRUE	TRUE
Service Level Management Configuration	SLM Manager	TRUE	TRUE	Always	Always	TRUE	TRUE	TRUE
	System Administrator	TRUE	TRUE	Always	Always	FALSE	TRUE	TRUE