Incident security roles and settings

The out-of-box security roles for the Incident module include the following:

• Incident process owner
• Incident coordinator
• Incident analyst
• Incident manager
• Incident task assignee
• Configuration auditor
• Operator

Mapping between previous security profiles and current PD security roles

The following table lists the mapping relationship between previous Incident security profiles and current PD security roles in the Incident module.

Security Profile	Security Role/Area
DEFAULT	DEFAULT/Incident
configuration auditor	configuration auditor/Incident
incident analyst	incident analyst/Incident
incident coordinator	incident coordinator/Incident
incident manager	incident manager/Incident
initiator	initiator/Incident
operator	operator/Incident
problem manager/coord	problem manager/Incident
	problem coordinator/Incident
service desk agent	service desk agent/Incident
service desk manager	service desk manager/Incident
service tech	service tech/Incident
sysadmin	sysadmin/Incident
N/A	incident task assignee/Incident
N/A	incident process owner/Incident

Field mapping between security profiles and PD security rights/settings

The following table lists the mapping of fields in legacy Incident security profiles and Process Designer security roles.

Security profile settings	Process Designer security rights and settings
New	New
Close	Delete/Close
Inactivate
Mass inactivate
Update	Update
Change category
View	View
Log
Can notify
Search for duplicates
Alternate views
Can use callback list
Advanced search
Reopen	Reopen
Mark problem candidate	Expert
Can suspend
Can unsuspend
Notes
Override
Tempate Mass Update
Complex Mass Update
Allow inefficient query	Allow Inefficient Query
Skip query warning	Skip Inefficient Query Warning
Can create personal views	Can Create Personal Views
Can create system views	Can Create System Views
Lock on display	Lock On Display
Modify Template	Modify Template
Allowed statuses	Allowed Statuses
QBE format	List Format
Search format	Search format
Manage format	Manage Format
Initial view	Initial View
Auto-notify format	Notify Format
Incident macro mail format	N/A
Default template
Default category
Assignment groups	Assignment groups
Authorized categories	Allowed Categories
New thread: View -> Search	New thread: View -> Search
New thread: Search -> List	New thread: Search -> List
New thread: List -> Edit	New thread: List -> Edit
New thread: View -> Edit	New thread: View -> Edit

Out-of-box role rights

Based on the mapping rules, the rights and settings in previous security profiles are mapped to the rights and settings in the Incident area specified in the corresponding security roles. See the table below for the out-of-box security rights in the Incident, Incident Tasks, and Incident Management Configuration areas. This table only lists the new security roles that have different settings with the default rights.

Area Name	Role Name	View	New	Update	Delete/Close	Modify Template	Expert	Admin
Incident	incident process owner	TRUE	TRUE	Always	Always	TRUE	TRUE	TRUE
	system administrator	TRUE	TRUE	Always	Always	TRUE	TRUE	TRUE
Incident Tasks	configuration auditor	TRUE	TRUE	Never	Never	FALSE	FALSE	FALSE
	incident analyst	TRUE	TRUE	Always	Always	FALSE	TRUE	FALSE
	incident coordinator	TRUE	TRUE	Always	Always	FALSE	TRUE	FALSE
	incident manager	TRUE	TRUE	Always	Always	TRUE	TRUE	TRUE
	incident process owner	TRUE	TRUE	Always	Always	TRUE	TRUE	TRUE
	incident task assignee	TRUE	FALSE	When assigned to workgroup	When assigned to workgroup	FALSE	FALSE	FALSE
	initiator	TRUE	TRUE	Never	Never	FALSE	FALSE	FALSE
	operator	TRUE	TRUE	When assigned	When assigned	FALSE	FALSE	FALSE
	problem manager	TRUE	TRUE	Always	Always	TRUE	TRUE	TRUE
	SD agent/manager	TRUE	FALSE	When assigned	Never	FALSE	FALSE	FALSE
	service tech	TRUE	TRUE	Always	Always	FALSE	FALSE	FALSE
	system administrator	TRUE	TRUE	Always	Always	TRUE	TRUE	TRUE
Incident Management Configuration	incident manager	TRUE	TRUE	Always	Always	FALSE	FALSE	FALSE
	incident process owner	TRUE	FALSE	Never	Never	FALSE	FALSE	FALSE
	system administrator	TRUE	TRUE	Always	Always	TRUE	TRUE	TRUE

For information about the out-of-box role rights in the Common Configuration area, see Out-of-box role rights in the Common Configuration area