Create a Role with Minimal Rights for the Integration

1. Go to User Administration > Roles.
2. Specify a name and a description.

3. Under the Contains Roles tab, add the following:

   1. Soap update

   2. Soap Create

   3. Soap

   4. Rest Service

4. Click Update.

The next step is to create ACLs to tighten up security. For this adapter you will need Create, Read, and Write ACLs for the staging tables and read only ACLs on the following:

• sys_db_object
• sys_dictionary
• sys_import_set_row
• sys_transform_entry
• sys_glide_object

The Read ACLs on the fourfive sys tables are necessary to be able to load class models in the UCMDB Mapping tool.

Do the following:

1. Elevate the admin privileges by clicking the lock icon and check security_admin.
2. Go to System Security > Access Control (ACL).

3. Click New.

   1. Select record as type.

   2. In operation select create.

   3. Keep active and admin overrides check box checked.

   4. In name select the inbound service created.

   5. Add a description to remind you why you created this ACL.

   6. In the Requires role section double click on Insert a new row and select the ucmdb integration role.

   7. Click Save and exit.

Include the roles Import Set loader and import set transformer in the integration role.