Use > Configuration Management > Configuration Management security

Configuration Management security

Configuration Management security areas

The security areas for Configuration Management are Configuration Item and Configuration Management Configuration. These areas contain the default security rights and settings for the Configuration Management module. The security right settings will be inherited by any new roles created in an area when no other settings are specified for that security role.

These security areas are used to set permissions to operators to provide access to particular area of Configuration Management. The following table lists the areas and the relevant Configuration Management menu items the operators can access.

Area

System Navigator menu items for this area

Configuration Item This area contains the default security rights and settings for Configuration Item. The rights will be copied to new roles created for this area. However, the settings will only be inherited if there are no settings specified on the Role.
Configuration Management Configuration

This area contains the default security rights and settings for Configuration Management configuration. The rights will be copied to new roles created for this area. However, the settings will only be inherited if there are no settings specified on the Role.

Note When you set the security rights for a security role in the Configuration Management Configuration area:

  • The View right is to view the settings defined in the Administration menu and the Configuration menu.
  • The Update right is to update the values of existing settings defined in the Administration menu and the Configuration menu.
  • The New and Delete rights are to create and delete a setting in the Configuration menu.
  • The Admin right is to add, edit, or delete the settings in the Administration > Settings menu.

Default rights

The default rights defined in areas will be inherited when you create new security roles. The following table shows the out-of-box default rights defined in the Configuration Item and Configuration Management Configuration areas.

Area Name View New Update Delete/Close Expert Admin
Configuration Item TRUE FALSE Never Never FALSE FALSE
Configuration Management Configuration FALSE FALSE     FALSE FALSE

Default settings

The default settings defined in areas will be inherited when you create new security roles. In an out-of-box system, none of the default settings is checked or set in the Configuration Item and Configuration Management Configuration areas.

Configuration Management security roles and settings

The out-of-box security roles for the Configuration Management module include the following:

  • Configuration Administrator
  • Configuration Auditor

Out-of-box role rights

Based on the mapping rules, the rights and settings in previous security profiles are mapped to the rights and settings in the Configuration Management area specified in the corresponding security roles. See the table below for the out-of-box security rights in the Configuration Item and Configuration Management Configuration areas. This table only lists the new security roles that have different settings with the default rights.

Area Name Role Name View New Update Delete/Close Modify Template Expert Admin
Configuration Item Configuration Administrator TRUE TRUE Always Never FALSE FALSE FALSE
Configuration Auditor TRUE TRUE Always Never FALSE FALSE FALSE
Configuration Management Configuration Configuration Administrator FALSE FALSE Never Never FALSE FALSE FALSE
Configuration Auditor FALSE FALSE Never Never FALSE FALSE FALSE