Predefined user groups

During an SA installation or upgrade, SA creates a set of predefined user groups based on user roles. You must grant read and/or write permissions to the Facility and Customer and other appropriate permissions to these user groups. Use of the predefined user groups is optional. SA recommends that you copy and modify the permissions of the predefined user groups to create your own customized user groups rather than modify the default groups. Your modification or deletion of predefined user groups is not affected by SA upgrades. The following table shows the predefined user groups:

Predefined user groups

User Group Name

Description

Opsware System Administrators

Opsware System Administration privileges.

Superusers

Complete access to all SA-managed objects and operations.

Viewers

Read-only access to all SA-managed objects and operations.

Reporters

Access to reporting only.

OS Policy Setters

Access to import & define OS build plans.

OS Deployers

Access to provision servers.

Patch Policy Setters

Access to set patching policy.

Patch Deployers

Access to install patches.

Software Policy Setters

Access to set software policy.

Software Deployers

Access to install software.

Command Line

Administrators

Shell access to servers.
Command-line Group A group having execute, read, write, list access to /Administration Extensions folder.
Command-logger Group A group having execute, read, write, list access to /Extensible Discovery folder.

Compliance Policy Setters

Access to define compliance policies.

Compliance Auditors

Access to execute compliance scans.

Compliance Enforcers

Access to remediate compliance failures.

Virtualization Administrators

Access to add, edit, and remove virtualization services, manage lifecycle of VMs and VM Templates, and administer permissions for virtualization inventory.

Hypervisor Managers

(If core was upgraded from SA 9.1x) Access to create, delete, and register VMs.

For more information about upgrade paths, see the SA Upgrade section.

Virtual Machine Managers

Access to start and stop VMs.

VM Lifecycle Managers

Access to manage lifecycle of VMs, including create, modify, migrate, clone, and delete VMs, VM power controls, and deploy VM Templates.

VM Template Deployers

Access to deploy VMs from VM Templates, clone VMs, and VM power controls.

VM Template Managers

Access to manage lifecycle of VMs and VM Templates, including create, modify, migrate, clone, delete VMs, VM power controls, convert VMs to VM Templates, deploy VMs from VM Templates, and delete VM Templates.

Command Line Administrators

Shell access to servers.

Chef Group

A group having execute, read, write, list access to Chef objects and operations.

Command-logger Group

A Group having execute, read, write, list access to /Extensible Discovery Folder.