Use > Incident Management > Incident Management overview > Incident access control

Incident access control

System profiles in Incident Management control authorize users to create, modify, and close records. The system provides Never, Always, and When Assigned options for each of these activities. These options allows you to grant a user with proper rights. For example, a user can create and close records, but cannot modify records that are not assigned to this user. The access right to functionality within each module is governed by HPE Service Manager security utilities, which define access based on role and user.

The Incident Management elements also use capability words to control points for accessing and edit control of incident records. In this model, there is an “operator” control record for each user of the system. This record contains a column that holds the specific capability words. These capability words allow or restrict functionality.

Service Manager also provides a security control to segment data between multiple customers. The Mandantan controls identify which customer data a particular user or group can access or update.