Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Universal CMDB Browser11.0

Administer > Authorize Access to CIs

Authorize Access to CIs

Browser CI Access Control enables you to assign granular access to the CIs in views or CI types in UCMDB, according to a user's assigned role. A role that has global View or Edit permission can see all CIs and relationships in UCMDB. A role that has View or Edit permission for a particular view can see only the CIs and relationships in that view. In addition, permission can be granted to view or edit particular CI types.

Note

You must assign at least one permission for a view or CIT in order to see CIs in the UCMDB Browser.
You must have View permission on a particular CI in order to refocus on it, even if that CI is visible in a widget because of Browser CI Access Control settings.

To authorize access to CIs:

In UCMDB, go to Security > Roles Manager.
Select the role to which you want to assign access.
Click the Browser CI Access Control tab and add available actions as required.
Select an available view or CI type for which you want to assign permissions.
When you are finished, click Save .

For additional details about permissions, see "User Permissions for the UCMDB Browser" in the Administer section of the UCMDB Help.

Note

If a CI does not have Edit permission assigned through a view or CI type, the Edit button will not be displayed in the Properties widget and it will not be possible to change any property's attributes in the UCMDB Browser.
A user will be able to see the composite CIs of permitted CIs, even he has not been granted specific permission for those composite CIs.
If a user has permissions on CIs of two CI types and those CIs are not composite CIs, in order to have permission on their relationship (for example, to view them in the Environment widget), the necessary triplet should be added to the calculated link. This is named Authorized Relationship Addition (UCMDB Browser), and it can be found in CI Type Manager > Calculated Relationships.

Use Cases

Enable a user to view or edit only specific CIs

Read only:
- Assign View permission to specific views.
- Assign View All CIs permission to a particular CI type.
Note By default, in the UCMDB Browser, the Party and Location CI types are automatically assigned View All CIs permission.
Read/Write:

Do one of the following:
- To edit all CIs that you can view, assign Edit All CIs permission on all views.
- To edit CIs in a specific view, assign Edit All CIs permission on only that view.
- To edit only specific CI types in relevant views, assign Edit By CIT permission to the views and Edit In View permission to a particular CI type.
  
  Note You can assign permissions to a group of views by selecting a node in the list of Available Views, or apply the permissions to all views by selecting the Root node.
- To edit all CIs of a specific CI type, assign Edit All CIs permission to that CI type.

Send Help Center feedback