Administer > Permissions reference > Service Automation Vizualizer permissions

Service Automation Visualizer permissions

The the following table specifies the Service Automation Visualizer (SAV) permissions required to perform specific actions in the SA Client. For security administrators, the table answers this question: To perform a particular action, what permissions does a user need?

In the following table, most of the entries in the User Action column correspond to menu items in the SA Client. In addition to action permissions, server read permissions are required on the managed servers affected by the analyze operation, such as permissions to open a Remote Terminal or a Remote Desktop Client, open the Device Explorer, and open a Global Shell session from the Service Automation Visualizer.

SAV permissions required to scan a server are the same for both physical servers and virtual servers.

For complete information, see the "Service Automation Visualizer" section in the SA 10.60 Use section.

SAV Permissions Required for User Actions

User Action

Action Permission

Source Server Permission (Customer, Facility)

Folder Permission

SAV-Only Operations

 

Launch the Service Automation Visualizer

Allow Analyze: Yes

Read

N/A

Generate a scan or refresh Snapshot— regular or virtual servers

Allow Analyze: Yes

Read

N/A

Create a Snapshot or edit a scheduled Snapshot

Allow Analyze: Yes

Manage Business Applications: Read & Write

Read

N/A

Start, stop, pause, restart virtual server inside of SAV (pause VM for VMware only—cannot pause a Solaris local zone)

Administer Virtual Server: Yes

Read

N/A

SA Client Operations

Run script (as a non-Super User)

Run Ad-hoc Scripts: Yes

Read and Write

N/A

Run script (as a Super User)

Run Ad Hoc & Source Visible Server Scripts As Super User: Yes

Read and Write

N/A

Execute OGFS script

Manage OGFS Scripts: Yes

Read and Write

N/A

SA Client Folder Operations

Open a Business Application from a folder

N/A

N/A

Read Objects Within Folder

Create a Business Application and save to a folder

Manage Business Applications: Yes

N/A

Write Objects Within Folder

Rename a Business Application inside a folder

N/A

N/A

Write Objects Within Folder

Delete a Business Application from a folder

N/A

N/A

Write Objects Within Folder

Cut, copy, or paste a Business Application from a folder

N/A

N/A

Write Objects Within Folder

In order to save a Business Application to a user’s own home directory in the Library, for example, /home/username, this user’s private user group will also need to have the Manage Business Applications permission set to Yes.