Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Macro name changed from html to html-bobswift during server to cloud migration processing.

...

Role Name

Available Functions

Contains Roles

Anchor
ops_admin
ops_admin
ops_admin

All functions; this is the Universal Controller administrator role. The easiest way to assign full permissions to a user is to add the user to the Administrator Group, which by default is assigned the ops_admin role.
 

Note
titleNote

The ops_admin role contains all other roles. If a user is assigned the ops_admin role, no other roles need to be assigned to that user, and unassigning any other role from the user will not revoke that role.

  • ops_agent_cluster_admin
  • ops_audit_view
  • ops_bundle_admin
  • ops_dba
  • ops_email_admin
  • ops_filter_global
  • ops_filter_group
  • ops_forecast_view
  • ops_imex
  • ops_ldap_admin
  • ops_multi_update
  • ops_oms_admin
  • ops_peoplesoft_admin
  • ops_promotion_admin
  • ops_property_admin
  • ops_report_admin
  • ops_restore_version
  • ops_sap_admin
  • ops_server_operation_admin
  • ops_service
  • ops_snmp_admin
  • ops_sso_admin
  • ops_universal_event_template_admin
  • ops_universal_template_admin
  • ops_user_admin

Anchor
ops_agent_cluster_admin
ops_agent_cluster_admin
ops_agent_cluster_admin

Create, read, update, and delete agent clusters.
 
(Also see Agent Cluster Permissions, below.)


Anchor
ops_audit_view
ops_audit_view
ops_audit_view

Read Audits.


Anchor
ops_bundle_admin
ops_bundle_admin
ops_bundle_admin

Html bobswift
<ul>
<li> Create, read, update, and delete 

Bundles

Html bobswift
.
<li> View 

Promotion Targets

Html bobswift
, including 

agent mappings

Html bobswift
.
<li> View 

Promotion History

Html bobswift
.
<li> View a record's 

list of bundles

Html bobswift
.
<li> View 

Promotion Schedules

Html bobswift
.
<li> 

Add a record to a bundleCreate

Html bobswift
.
<li> 

Create bundles by date

Html bobswift
.
<li> Generate a 

Bundle Report

Html bobswift
.
</ul>

(Also see Bundle Permissions and Promotion Target Permissions, below.)


Anchor
ops_dashboard_global
ops_dashboard_global
ops_dashboard_global

Create, update, and delete Dashboard Details with Everyone visibility; updating includes updating Dashboard visibility.


Anchor
ops_dashboard_group
ops_dashboard_group
ops_dashboard_group

Create, update, and delete Dashboard Details that are visible for a group in which this user is a member; updating includes updating Dashboard visibility.


Anchor
ops_dba
ops_dba
ops_dba

Create, update, delete Database Connections.
 
(Also see Database Connection Permissions, below.)


Anchor
ops_email_admin
ops_email_admin
ops_email_admin

Create, read, update, delete Email Connections.
 
(Also see Email Connection Permissions, below.)


Anchor
ops_filter_global
ops_filter_global
ops_filter_global

Create Filters with Everyone visibility.


Anchor
ops_filter_group
ops_filter_group
ops_filter_group

Create Filters that belong to a group of which this user is a member.


Anchor
ops_forecast_view
ops_forecast_view
ops_forecast_view

Read Forecast Calendar, Forecasts List, and Forecast Details.
 

Note
titleNote

Users also can read forecast information, without being assigned this role, if they have Read permission for the Task specified in the Forecast Details.


Anchor
ops_imex
ops_imex
ops_imex

List Import/Export XML.


Anchor
ops_ldap_admin
ops_ldap_admin
ops_ldap_admin

Read and update LDAP Settings.


Anchor
ops_multi_update
ops_multi_update
ops_multi_update

Update multiple records.


Anchor
ops_oms_admin
ops_oms_admin
ops_oms_admin

Create, update, and delete OMS Servers.


Anchor
ops_peoplesoft_admin
ops_peoplesoft_admin
ops_peoplesoft_admin

Create, read, update, and delete PeopleSoft Connections.
 
(Also see PeopleSoft Connection Permissions, below.)


Anchor
ops_promotion_accept_bundle
ops_promotion_accept_bundle
ops_promotion_accept_bundle

Accept bundles being promoted to a target server. (The Accept Bundle command is executed on the target server automatically as part of the Promote and Promote Bundle commands and does not involve user interaction.)


Anchor
ops_promotion_admin
ops_promotion_admin
ops_promotion_admin

Html bobswift
<ul>
<li> Create, read, update, and delete 

Promotion Targets

Html bobswift
, including agent mappings.
<li> View 

Bundles

Html bobswift
.
<li> 

Refresh Target Agents

Html bobswift
.
<li> 

Promote records

Promote

schedule the promotion

Promotion Schedules
Html bobswift
.
<li> 

Promote

Html bobswift
 or 

schedule the promotion

Html bobswift
 of a bundle.
<li> Reschedule, cancel, and delete 

Promotion Schedules

Html bobswift
.
<li> 

Generate a Bundle report

By default, the ops_promotion_admin role also grants Read permission
Note
titleNote
Html bobswift
.
<li> Accept bundles being promoted to a target server. (The <b>Accept Bundle</b> command is executed on the target server automatically as part of the <b>Promote</b> and <b>Promote Bundle</b> commands and does not involve user interaction.)
</ul>
Note
titleNote

By default, the ops_promotion_admin role also grants Read permission for any type of definition that can be added to a Bundle, given the expectation that a promotion administrator would review the content of a Bundle before promoting it. To change this default behaviour, see the Promotion Read Permission Required Universal Controller property.

 
(Also see Bundle Permissions and Promotion Target Permissions, below.)

  • ops_promotion_accept_bundle

Anchor
ops_property_admin
ops_property_admin
ops_property_admin

Read, update, and delete Universal Controller system properties and Password Settings.


Anchor
ops_report_admin
ops_report_admin
ops_report_admin

report

visibility
Html bobswift
<ul>
<li> Create, read, update, and delete any 

report

Html bobswift
, regardless of 

visibility

Html bobswift
, in addition to the roles granted by the 

ops_widget_admin

Html bobswift
 role.
<li> Create, update, and delete 

Dashboard Details

The
Html bobswift

Dashboard Details

 with Everyone visibility and 

Dashboard Details

Html bobswift
 that are visible for a group in which this user is a member; updating includes updating Dashboard visibility.
</ul>

The Strict Report Create Constraints Universal Controller system property specifies whether or not to restrict report creation only to users with the ops_admin, ops_report_admin, ops_report_group, or ops_report_global role.
 
The Strict Dashboard Create Constraints Universal Controller system property specifies whether or not to restrict Dashboard creation only to users with the ops_admin, ops_report_admin, ops_dashboard_group, or ops_dashboard_global role.

  • ops_dashboard_global
  • ops_dashboard_group
  • ops_report_global
  • ops_report_group
  • ops_report_publish
  • ops_widget_admin

Anchor
ops_report_global
ops_report_global
ops_report_global

Create global reports.


Anchor
ops_report_group
ops_report_group
ops_report_group

Create reports that belong to a group to which this user is a member.


Anchor
ops_report_publish
ops_report_publish
ops_report_publish

Publish reports. (This role was applicable only to the Controller 5.x release.)


Anchor
ops_restore_version
ops_restore_version
ops_restore_version

Restore old versions of records.


Anchor
ops_sap_admin
ops_sap_admin
ops_sap_admin

Create, read, update, and delete SAP Connections.
 
(Also see SAP Connection Permissions, below.)


Anchor
ops_server_operation_admin
ops_server_operation_admin
ops_server_operation_admin

Run Server Operations.


Anchor
ops_service
ops_service
ops_service


Anchor
ops_snmp_admin
ops_snmp_admin
ops_snmp_admin

Create, read, update, and delete SNMP Managers, to which the Controller sends SNMP notifications.
 
(Also see SNMP Manager Permissions, below.)


Anchor
ops_sso_admin
ops_sso_admin
ops_sso_admin

Read and update Single Sign-On Settings.


Anchor
ops_universal_template_admin
ops_universal_template_admin
ops_universal_event_template_admin

Create, read, update, and delete Universal Event Templates.
  • ops_universal_event_template_view

Anchor
ops_universal_template_view
ops_universal_template_view
ops_universal_event_template_view

Read Universal Event Templates.

Anchor
ops_universal_template_admin
ops_universal_template_admin
ops_universal_template_admin

Create, read, update, and delete Universal Templates (including Universal Template Event Templates).

  • ops_universal_template_view

Anchor
ops_universal_template_view
ops_universal_template_view
ops_universal_template_view

Read Universal Templates (including Universal Template Event Templates).


Anchor
ops_user_admin
ops_user_admin
ops_user_admin

Create, read, update, and delete users and groups.


Anchor
ops_widget_admin
ops_widget_admin
ops_widget_admin

Create, update, and delete Widgets.


...

Options

Description

Create

Grants permission to create a Bundle matching both the specified name wildcard and business service membership, including the use of the Create Bundle By Date and Create Bundle By Business Service commands.

Read

Grants permission to read a Bundle matching both the specified name wildcard and business service membership.

  • User can run a Bundle Report for a Bundle matching both the specified name wildcard and business service membership.
  • User can Read a Promotion Schedule associated with a Bundle matching both the specified name wildcard and business service membership.

Update

Grants permission to update a Bundle matching both the specified name wildcard and business service membership, including the use of the Add To Bundle command.

Delete

Grants permission to delete a Bundle matching both the specified name wildcard and business service membership.

Commands

For the ALL or Promote Bundle command:

User can promote a Bundle matching

Html bobswift
<ul>
<li> ALL: Grants permission to issue any command.
<li> Promote Bundle: Grants permission to promote a Bundle. 
</ul>

For the ALL or Promote Bundle command:

  • User can promote a Bundle matching both the specified name wildcard and business service membership, assuming the user has Read permission for the Bundle.
  • User can Cancel, Reschedule, or Delete a Promotion Schedule associated with a Bundle matching both the specified name wildcard and business service membership, assuming the user has Read permission for the Bundle.

...

Options

Description

Create

Task instances are created automatically when the task launches, so the Create permission does not appear.

Read

Grants permission to read a Task Instance

Update

Grants permission to update certain fields on a Task Instance.

Delete

Grants permission to delete a Task Instance.

Commands

For command descriptions, see Manually Running and Controlling Tasks.

.

Read

Grants permission to read a Task Instance

Update

Grants permission to update certain fields on a Task Instance.

Delete

Grants permission to delete a Task Instance.

Commands

For command descriptions, see Manually Running and Controlling Tasks.

Html bobswift
<ul>
<li> ALL: Grants permission to issue any command.
<li> Cancel: Grants permission to cancel a Task Instance.
<li> Clear All Dependencies: Grants permission to clear all dependencies on a Task Instance.
<li> Clear Predecessors: Grants permission to clear all predecessors on a Task Instance.
<li> Clear Exclusive: Grants permission to clear all mutual exclusive dependencies from a Task Instance.
<li> Clear Resources: Grants permission to clear all resource dependencies of a Task Instance.
<li> Clear Time Wait/Delay: Grants permission to clear all Wait To Start and Delay On Start specifications for a Task Instance.
<li> Force Finish: Grants permission to force finish a Task Instance.
<li> Force Finish/Cancel: Grants permission to force finish/cancel a Task Instance.
<li> Hold: Grants permission to put a Task Instance on hold.
<li> Insert Task: Grants permission to insert a task on the workflow monitor of a workflow Task Instance.
<li> Mark as Satisfied: Can mark a dependency as satisfied.
<li> Re-run: Grants permission to re-run a Task Instance.
<li> Release: Grants permission to release a Task Instance from hold.
<li> Release Recursive: Grants permission to release a workflow and all its tasks from hold.
<li> Retrieve Output: Grants permission to execute the Retrieve Output button.
<li> Set Priority Low: Grants permission to change the priority of a task to Low.
<li> Set Priority Medium: Grants permission to change the priority of a task to Medium.
<li> Set Priority High: Grants permission to change the priority of a task to High.
<li> Set Completed: Grants permission to set a Manual Task Instance status to completed.
<li> Set Started: Grants permission to set a Manual Task Instance status to a new started time.
<li> Skip: Grants permission to skip a Task Instance. 
<li> Unskip: Grants permission to unskip a Task Instance selected to be skipped.
</ul>
Note
titleNote

Universal Controller will initially check for command permission specifically for the task instance.

If no command permission is granted for the task instance, Universal Controller will check if command permission is granted for the parent workflow task instance, and then continue to check for command permission up the workflow task instance hierarchy.

...