Page Comparison

...

Operation	User without any role	User with ops_service_role	User with ops_user_admin or ops_admin role
Read	Read its own record (details). Read its own Role, Permissions, and Member of Groups (group membership), but cannot read any Group record.	Read any user record.	Create/update/read/delete any fields or any related data.
Update	Update a subset of fields of its own record. Cannot update any related data.	Update a subset of fields of its own record. Cannot update any related data.
Create	No permission to create a user.	No permission to create a user.
Delete	No permission to delete a user.	No permission to delete a user.

...

Property

UI Field Name

Description

Specifications

Required

Anchor

	allGroups - PERM
	allGroups - PERM

allGroups

Member of Any Business Service or Unassigned

Specification for whether or not this permission applies both to records that belong to any Business Service and to records that do not belong to any Business Service.

Boolean. Valid Values: true/false. Default is false.

N

Anchor

	commands - PERM
	commands - PERM

commands

Commands

Commands that are associated with each permission.

Valid values: see #Command Permissions, below.

N

Anchor

	defaultGroup - PERM
	defaultGroup - PERM

defaultGroup

Unassigned to Business Service

Specification for whether or not this permission applies to records that do not belong to any Business Service.

Boolean. Valid Values: true/false. Default is false.

N

Anchor

	nameWildcard - PERM
	nameWildcard - PERM

nameWildcard

Name

Specification to apply this permission to records whose name matches the string specified here.

Wildcards (*'s) can be used.

Y

Anchor

	opCreate - PERM
	opCreate - PERM

opCreate

Create

Allows the user to create records of the specified permissionType.

Boolean. Valid Values: true/false. Default is false.

Cannot be set to true if permissionType is Agent.

N

Anchor

	opDelete - PERM
	opDelete - PERM

opDelete

Delete

Allows the user to delete records of the specified permissionType.

Boolean. Valid Values: true/false. Default is false.

N

Anchor

	opExecute - PERM
	opExecute - PERM

opExecute

Execute

Allows the user to execute records of the specified permissionType.

Boolean. Valid Values: true/false. Default is false.

If the Strict Connection Execute Constraints Universal Controller system property is false:

If the Strict Connection Execute Constraints Universal Controller system property is true:

N

Anchor

	opRead - PERM
	opRead - PERM

opRead

Read

Allows the user to read records of the specified permissionType.

Boolean. Valid Values: true/false. Default is false.

If the Strict Business Service Membership Read Constraints Universal Controller system property is false:

N

Anchor

	opUpdate - PERM
	opUpdate - PERM

opUpdate

Update

Allows the user to update records of the specified permissionType.

Boolean. Valid Values: true/false. Default is false.

Must be set to true if opCreate is set to true.

N

Anchor

	opswiseGroups - PERM
	opswiseGroups - PERM

opswiseGroups

Member of Business Services

Applies this permission to records that are members of the selected Business Service(s).

XML

Panel

JSON

Panel

N

Anchor

	permissionType - PERM
	permissionType - PERM

permissionType

Type

Type of permission for this user.

Valid values:

Y

Anchor

	sysId - PERM
	sysId - PERM

sysId

n/a

System ID field in the database for a record.

Persisted only if retainSysIds is set to true.

N

...

Versions Compared

Old Version 3

New Version 4

Key