Page Comparison

...

Step 1	Open a User or Group record.
Step 2	For a User, click the User Roles tab. A list of Roles assigned to the User displays. Image RemovedImage Added For a Group, click the Group Roles tab. A list of Roles assigned to the Group displays. Image Removed Image Added
Step 3	Click Edit. An Edit Members pop-up displays that allows you to assign Roles to the User / Group. For example: The Collection window displays all Roles that have not been assigned to this User / Group. The Roles List window displays all Roles that have been assigned to this User / Group.
Step 4	To filter the Users/Groups listed in the Collection window, enter characters in the text field above the Name column. Only Users/Groups containing that sequence of characters will display in the list.
Step 5	To assign a Role to the User / Group, move the Role from the Collection window to the Roles window: To move a single Role, double-click it or click it once and then click the > arrow. To move multiple Roles, Ctrl-click them and then click the > arrow. To move all Roles, click the >> arrow. To unassign a Role to the User / Group, move the Role from the Roles window to the Collection window: To move a single Role, double-click it or click it once and then click the < arrow. To move multiple Roles, Ctrl-click them and then click the < arrow. To move all Roles, click the << arrow.
Step 6	Click Save.

...

. <li>

.
View Promotion Targets, including agent mappings.
View Promotion History.
View a record's list of bundles.
View Promotion Schedules.
Add a record to a bundle

Role Name

Available Functions

Contains Roles

Anchor

	ops_admin
	ops_admin

ops_admin

All functions; this is the Universal Controller administrator role. The easiest way to assign full permissions to a user is to add the user to the Administrator Group, which by default is assigned the ops_admin role.

Note

title	Note

The ops_admin role contains all other roles. If a user is assigned the ops_admin role, no other roles need to be assigned to that user, and unassigning any other role from the user will not revoke that role.

ops_agent_cluster_admin
ops_audit_view
ops_bundle_admin
ops_dba
ops_email_admin
ops_filter_global
ops_filter_group
ops_forecast_view
ops_imex
ops_ldap_admin
ops_multi_update
ops_oms_admin
ops_peoplesoft_admin
ops_promotion_admin
ops_property_admin
ops_report_admin
ops_restore_version
ops_sap_admin
ops_server_operation_admin
ops_service
ops_snmp_admin
ops_sso_admin
ops_universal_event_template_admin
ops_universal_template_admin
ops_user_admin

Anchor

	ops_agent_cluster_admin
	ops_agent_cluster_admin

ops_agent_cluster_admin

Create, read, update, and delete agent clusters.

(Also see Agent Cluster Permissions, below.)

Anchor

	ops_audit_view
	ops_audit_view

ops_audit_view

Read Audits.

Anchor

	ops_bundle_admin
	ops_bundle_admin

ops_bundle_admin

html-bobswift

Create,

read,

update,

and

delete

Bundles

Html bobswift
. <li> View

Promotion Targets

Html bobswift
, including

agent mappings

Html bobswift
. <li> View

Promotion History

Html bobswift
. <li> View a record's

list of bundles

Html bobswift
. <li> View

Promotion Schedules

Html bobswift

Html bobswift
. <li>

Create bundles by date

Html bobswift
. <li> Generate a

Bundle Report

Html bobswift. </ul>

(Also see Bundle Permissions and Promotion Target Permissions, below.)

Anchor

	ops_dashboard_global
	ops_dashboard_global

ops_dashboard_global

Create, update, and delete Dashboard Details with Everyone visibility; updating includes updating Dashboard visibility.

Anchor

	ops_dashboard_group
	ops_dashboard_group

ops_dashboard_group

Create, update, and delete Dashboard Details that are visible for a group in which this user is a member; updating includes updating Dashboard visibility.

Anchor

	ops_dba
	ops_dba

ops_dba

Create, update, delete Database Connections.

(Also see Database Connection Permissions, below.)

Anchor

	ops_email_admin
	ops_email_admin

ops_email_admin

Create, read, update, delete Email Connections.

(Also see Email Connection Permissions, below.)

Anchor

	ops_filter_global
	ops_filter_global

ops_filter_global

Create Filters with Everyone visibility.

Anchor

	ops_filter_group
	ops_filter_group

ops_filter_group

Create Filters that belong to a group of which this user is a member.

Anchor

	ops_forecast_view
	ops_forecast_view

ops_forecast_view

Read Forecast Calendar, Forecasts List, and Forecast Details.

Note

title	Note

Users also can read forecast information, without being assigned this role, if they have Read permission for the Task specified in the Forecast Details.

Anchor

	ops_imex
	ops_imex

ops_imex

List Import/Export XML.

Anchor

	ops_ldap_admin
	ops_ldap_admin

ops_ldap_admin

Read and update LDAP Settings.

Anchor

	ops_multi_update
	ops_multi_update

ops_multi_update

Update multiple records.

Anchor

	ops_oms_admin
	ops_oms_admin

ops_oms_admin

Create, update, and delete OMS Servers.

Anchor

	ops_peoplesoft_admin
	ops_peoplesoft_admin

ops_peoplesoft_admin

Create, read, update, and delete PeopleSoft Connections.

(Also see PeopleSoft Connection Permissions, below.)

Anchor

	ops_promotion_accept_bundle
	ops_promotion_accept_bundle

ops_promotion_accept_bundle

Accept bundles being promoted to a target server. (The Accept Bundle command is executed on the target server automatically as part of the Promote and Promote Bundle commands and does not involve user interaction.)

Anchor

	ops_promotion_admin
	ops_promotion_admin

ops_promotion_admin

html-bobswift

Create,

read,

update,

and

delete

Promotion Targets

Html bobswift

,

including

agent

mappings.

<li> View

Bundles

Html bobswift. <li>

View Bundles.
Refresh Target Agents

Html bobswift

.

<li>

Promote records

Html bobswift

.

<li>

Promote

Html bobswift
or

schedule the promotion

Html bobswift
of a bundle. <li> Reschedule, cancel, and delete

Promotion Schedules

Html bobswift. <li>

Promote or schedule the promotion of a bundle.
Reschedule, cancel, and delete Promotion Schedules.
Generate a Bundle report

Html bobswift. <li> Accept bundles being promoted to a target server. (The Accept Bundle command is executed on the target server automatically as part of the Promote and Promote Bundle commands and does not involve user interaction.) </ul>

.
Accept bundles being promoted to a target server. (The Accept Bundle command is executed on the target server automatically as part of the Promote and Promote Bundle commands and does not involve user interaction.)

Note

title	Note

By default, the ops_promotion_admin role also grants Read permission for any type of definition that can be added to a Bundle, given the expectation that a promotion administrator would review the content of a Bundle before promoting it. To change this default behaviour, see the Promotion Read Permission Required Universal Controller property.

(Also see Bundle Permissions and Promotion Target Permissions, below.)

ops_promotion_accept_bundle

Anchor

	ops_property_admin
	ops_property_admin

ops_property_admin

Read, update, and delete Universal Controller system properties and Password Settings.

Anchor

	ops_report_admin
	ops_report_admin

ops_report_admin

html-bobswift

Create,

read,

update,

and

delete

report

Html bobswift
, regardless of

visibility

Html bobswift
, in addition to the roles granted by the

any

report, regardless of visibility, in addition to the roles granted by the ops_widget_admin

Html bobswift

role.

<li>

Create,

update,

and

delete

Dashboard Details

Html bobswift
with Everyone visibility and

Dashboard Details

Html bobswift that are visible for a group in which this user is a member; updating includes updating Dashboard visibility. </ul>

with Everyone visibility and Dashboard Details that are visible for a group in which this user is a member; updating includes updating Dashboard visibility.

The Strict Report Create Constraints Universal Controller system property specifies whether or not to restrict report creation only to users with the ops_admin, ops_report_admin, ops_report_group, or ops_report_global role.

The Strict Dashboard Create Constraints Universal Controller system property specifies whether or not to restrict Dashboard creation only to users with the ops_admin, ops_report_admin, ops_dashboard_group, or ops_dashboard_global role.

ops_dashboard_global
ops_dashboard_group
ops_report_global
ops_report_group
ops_report_publish
ops_widget_admin

Anchor

	ops_report_global
	ops_report_global

ops_report_global

Create global reports.

Anchor

	ops_report_group
	ops_report_group

ops_report_group

Create reports that belong to a group to which this user is a member.

Anchor

	ops_report_publish
	ops_report_publish

ops_report_publish

Publish reports. (This role was applicable only to the Controller 5.x release.)

Anchor

	ops_restore_version
	ops_restore_version

ops_restore_version

Restore old versions of records.

Anchor

	ops_sap_admin
	ops_sap_admin

ops_sap_admin

Create, read, update, and delete SAP Connections.

(Also see SAP Connection Permissions, below.)

Anchor

	ops_server_operation_admin
	ops_server_operation_admin

ops_server_operation_admin

Run Server Operations.

Anchor

	ops_service
	ops_service

ops_service

Log in and view Home Dashboard.
The Active Task Instances By Status widget will remain blank unless the user is assigned the Task Instance Read permission, as the ops_service role does not include access to such data.
Read Agents.
Read Universal Controller system properties.
Read Password Settings.
Read LDAP Settings (and run the Test Connection command).
Read Single Sign-On Settings.
Read Universal Event Templates and related data (Fields and Field Choices).
Read Universal Templates and related data (Fields and Field Choices).
Read Data Backup/Purge.
Unless the user also is assigned the ops_audit_view role, the Audit tab on the Data Backup/Purge Details, which allows for conveniently viewing related Audit records, will not be available.
Read Users and related data (Roles, Group Membership, and Permissions).
Update the User Details of the user.
Read Groups and related data (Roles, Group Membership, Child Groups, and Permissions).
Read Universal Controller Metrics (Monitoring Web Services).

Anchor

	ops_snmp_admin
	ops_snmp_admin

ops_snmp_admin

Create, read, update, and delete SNMP Managers, to which the Controller sends SNMP notifications.

(Also see SNMP Manager Permissions, below.)

Anchor

	ops_sso_admin
	ops_sso_admin

ops_sso_admin

Read and update Single Sign-On Settings.

Anchor

	ops_universal_template_admin
	ops_universal_template_admin

ops_universal_event_template_admin

Create, read, update, and delete Universal Event Templates.

ops_universal_event_template_view

Anchor

	ops_universal_template_view
	ops_universal_template_view

ops_universal_event_template_view

Read Universal Event Templates.

Anchor

	ops_universal_template_admin
	ops_universal_template_admin

ops_universal_template_admin

Create, read, update, and delete Universal Templates (including Universal Template Event Templates).

ops_universal_template_view

Anchor

	ops_universal_template_view
	ops_universal_template_view

ops_universal_template_view

Read Universal Templates (including Universal Template Event Templates).

Anchor

	ops_user_admin
	ops_user_admin

ops_user_admin

Create, read, update, and delete users and groups.

Anchor

	ops_widget_admin
	ops_widget_admin

ops_widget_admin

Create, update, and delete Widgets.

Options	Description
Create	Grants permission to create a new Application.
Read	Grants permission to read an Application.
Update	Grants permission to update an Application.
Delete	Grants permission to delete an Application.
Commands	See Application Control Tasks for details. Options: ALL: Grants permission to execute a Start, Stop, and Query from the Application resource screen. Start: Grants permission to execute a Start from the Application resource screen. Stop: Grants permission to execute a Stop from the Application resource screen. Query: Grants permission to execute a Query from the Application resource screen.

Options	Description
Create	Grants permission to create a Bundle matching both the specified name wildcard and business service membership, including the use of the Create Bundle By Date and Create Bundle By Business Service commands.
Read	Grants permission to read a Bundle matching both the specified name wildcard and business service membership. User can run a Bundle Report for a Bundle matching both the specified name wildcard and business service membership. User can Read a Promotion Schedule associated with a Bundle matching both the specified name wildcard and business service membership.
Update	Grants permission to update a Bundle matching both the specified name wildcard and business service membership, including the use of the Add To Bundle command.
Delete	Grants permission to delete a Bundle matching both the specified name wildcard and business service membership.
Commands
Html bobswift

Options	Description
Create	Grants permission to create a new Calendar.
Read	Grants permission to read a Calendar. The Read check box will be checked automatically if the Business Service Visibility Restricted Universal Controller system property is false.
Update	Grants permission to update a Calendar.
Delete	Grants permission to delete a Calendar.
Commands	ALL: Grants permission to issue any command. Copy Calendar: Grants permission to copy a Calendar.

Options	Description
Create	Grants permission to create a new Credential.
Read	Grants permission to read a Credential. The Read check box will be checked automatically if the Business Service Visibility Restricted Universal Controller system property is false.
Update	Grants permission to update a Credential.
Delete	Grants permission to delete a Credential.
Execute	Grants permission to execute a task that requires a Credential.
Commands	N/A

Options	Description
Create	Grants permission to create a new Database Connection.
Read	Grants permission to read a Database Connection. The Read check box will be checked automatically if the Business Service Visibility Restricted Universal Controller system property is false.
Update	Grants permission to update a Database Connection.
Delete	Grants permission to delete a Database Connection.
Execute	Grants permission to execute a task that requires a Database Connection. (Displays only if the Strict Connection Execute Constraints Universal Controller system property is true.)
Commands	ALL: Grants permission to issue any command. Copy Database Connection: Grants permissions to copy a Database Connection. Test Connection: Grants permission to test a Database Connection.

Versions Compared

Old Version 14

New Version Current

Key

Anchor
Agent Permissions
Agent Permissions
Agent Permissions

Anchor
Application Permissions
Application Permissions
Application Permissions

Anchor
Calendar Permissions
Calendar Permissions
Calendar Permissions

Anchor
Credential Permissions
Credential Permissions
Credential Permissions

Anchor
Email Template Permissions
Email Template Permissions
Email Template Permissions

Anchor
Script Permissions
Script Permissions
Script Permissions

Anchor
Task Permissions
Task Permissions
Task Permissions

Anchor
Task Instance Permissions
Task Instance Permissions
Task Instance Permissions

Anchor
Trigger Permissions
Trigger Permissions
Trigger Permissions

Anchor
Variable Permissions
Variable Permissions
Variable Permissions

Anchor
Virtual Resource Permissions
Virtual Resource Permissions
Virtual Resource Permissions

Options	Description
Create	Grants permission to create a new Email Connection.
Read	Grants permission to read an Email Connection. The Read check box will be checked automatically if the Business Service Visibility Restricted Universal Controller system property is false.
Update	Grants permission to update an Email Connection.
Delete	Grants permission to delete an Email Connection.
Execute	Grants permission to execute a task that requires an Email Connection. (Displays only if the Strict Connection Execute Constraints Universal Controller system property is true.)
Commands	ALL: Grants permission to issue any command. Copy Email Connection: Grants permissions to copy an Email Connection. Test Connection: Grants permission to test an Email Connection.

Options	Description
Create	Grants permission to create a new OMS Server.
Read	Grants permission to read an OMS Server. The Read check box will be checked automatically if the Business Service Visibility Restricted Universal Controller system property is false.
Update	Grants permission to update an OMS Server.
Delete	Grants permission to delete an OMS Server.
Commands	ALL: Grants permission to suspend and resume OMS Servers. Resume: Grants permission to resume the connection of a suspended OMS Server. Suspend: Grants permission to suspend the connection of an OMS Server.

Options	Description
Create	Grants permission to create a new PeopleSoft Connection.
Read	Grants permission to read a PeopleSoft Connection. The Read check box will be checked automatically if the Business Service Visibility Restricted Universal Controller system property is false.
Update	Grants permission to update a PeopleSoft Connection.
Delete	Grants permission to delete a PeopleSoft Connection.
Execute	Grants permission to execute a task that requires a PeopleSoft Connection. (Displays only if the Strict Connection Execute Constraints Universal Controller system property is true.)
Commands	ALL: Grants permission to issue any command. Copy PeopleSoft Connection: Grants permission to copy a PeopleSoft Connection.

Options	Description
Create	Grants permission to create a Promotion Target matching both the specified name wildcard and business service membership.
Read	Grants permission to read a Promotion Target matching both the specified name wildcard and business service membership. User can View Target Server Info for Promotion Target matching both the specified name wildcard and business service membership.
Update	Grants permission to update a Promotion Target matching both the specified name wildcard and business service membership.
Delete	Grants permission to delete a Promotion Target matching both the specified name wildcard and business service membership
Execute	Grants permission to promote a Bundle using a Promotion Target matching both the specified name wildcard and business service membership, assuming the user has both Read permission and Promote Bundle command permission for the Bundle.
Commands	ALL: Grants permission to issue any command. Refresh Target Agents: Grants permission to refresh Target Agents.

Options	Description
Create	Grants permission to create a new SAP Connection.
Read	Grants permission to read an SAP Connection. The Read check box will be checked automatically if the Business Service Visibility Restricted Universal Controller system property is false.
Update	Grants permission to update an SAP Connection.
Delete	Grants permission to delete an SAP Connection.
Execute	Grants permission to execute a task that requires an SAP Connection. (Displays only if the Strict Connection Execute Constraints Universal Controller system property is true.)
Commands	ALL: Grants permission to issue any command. Copy SAP Connection: Grants permissions to copy an SAP Connection.

Options	Description
Create	Grants permission to create a new Script.
Read	Grants permission to read a Script.
Update	Grants permission to update a Script.
Delete	Grants permission to delete a Script.
Execute	Grants permission to execute a Script contained by a task.
Commands	ALL: Grants permission to issue any command. Copy Script: Grants permission to copy a Script.

Options	Description
Create	Grants permission to create a new SNMP Manager.
Read	Grants permission to read an SNMP Manager. The Read check box will be checked automatically if the Business Service Visibility Restricted Universal Controller system property is false.
Update	Grants permission to update an SNMP Manager.
Delete	Grants permission to delete an SNMP Manager.
Execute	Grants permission to execute a task that requires an SNMP Manager. (Displays only if the Strict Connection Execute Constraints Universal Controller system property is true.)
Commands	ALL: Grants permission to issue any command. Copy SNMP Manager: Grants permissions to copy an SNMP Manager.

Options	Description
Create	Grants permission to create a new Task.
Read	Grants permission to read a Task.
Update	Grants permission to update a Task.
Delete	Grants permission to delete a Task.
Commands	ALL: Grants permission to issue any command. Copy Task: Grants permission to copy a Task. Launch: Grants permission to launch a Task. Recalculate Forecast: Grants permission to recalculate a forecast. Reset Statistics: Grants permission to reset statistics, including statistics being tracked by each parent Workflow of a Task. Reset z/OS Override Statistics: Grants permission to reset z/OS override statistics. Set Execution Restriction: Grants permission to set an execution restriction for a task in a workflow.

Options	Description
Create	Grants permission to create a Trigger.
Read	Grants permission to read a Trigger.
Update	Grants permission to update a Trigger.
Delete	Grants permission to delete a Trigger.
Commands	ALL: Grants permission to issue any command. Assign Execution User: Grants permission to override the execution user of task instances launched by a Trigger. Copy Trigger: Grants permission to copy a Trigger. Disable Trigger: Grants permission to disable a Trigger. Enable Trigger: Grants permission to enable a Trigger. Recalculate Forecast: Grants permission to recalculate a forecast. Set Skip Count: Grants permission to perform a Set Skip Count action with/without Update permission. Trigger Now: Grants permission to Trigger (launch) a task.

Options	Description
Create	Grants permission to create a Variable.
Read	Grants permission to read a Variable.
Update	Grants permission to update a Variable.
Delete	Grants permission to delete a Variable.
Commands	N/A

Options	Description
Create	Grants permission to create a virtual resource.
Read	Grants permission to read a virtual resource. The Read check box will be checked automatically if the Business Service Visibility Restricted Universal Controller system property is false.
Update	Grants permission to update a virtual resource.
Delete	Grants permission to delete a virtual resource.
Execute	Grants permission to execute a virtual resource.
Commands	ALL: Grants permission to issue any command. Copy Virtual Resource: Grants permission to copy a Virtual Resource.

Step 1	From the Administration navigation pane, select Security > Groups. The Groups list displays.
Step 2	As desired, filter the list to select the group(s) whose permissions you want to export. When you perform the export, all groups matching the filter will be exported.
Step 3	Access the Action menu and select Export > Permissions For Group. Image RemovedImage Added

Page Comparison

Versions Compared

Old Version 14

New Version Current

Key

AnchorAgent PermissionsAgent PermissionsAgent Permissions

AnchorApplication PermissionsApplication PermissionsApplication Permissions

AnchorCalendar PermissionsCalendar PermissionsCalendar Permissions

AnchorCredential PermissionsCredential PermissionsCredential Permissions

AnchorEmail Template PermissionsEmail Template PermissionsEmail Template Permissions

AnchorScript PermissionsScript PermissionsScript Permissions

AnchorTask PermissionsTask PermissionsTask Permissions

AnchorTask Instance PermissionsTask Instance PermissionsTask Instance Permissions

AnchorTrigger PermissionsTrigger PermissionsTrigger Permissions

AnchorVariable PermissionsVariable PermissionsVariable Permissions

AnchorVirtual Resource PermissionsVirtual Resource PermissionsVirtual Resource Permissions

Anchor
Agent Permissions
Agent Permissions
Agent Permissions

Anchor
Application Permissions
Application Permissions
Application Permissions

Anchor
Calendar Permissions
Calendar Permissions
Calendar Permissions

Anchor
Credential Permissions
Credential Permissions
Credential Permissions

Anchor
Email Template Permissions
Email Template Permissions
Email Template Permissions

Anchor
Script Permissions
Script Permissions
Script Permissions

Anchor
Task Permissions
Task Permissions
Task Permissions

Anchor
Task Instance Permissions
Task Instance Permissions
Task Instance Permissions

Anchor
Trigger Permissions
Trigger Permissions
Trigger Permissions

Anchor
Variable Permissions
Variable Permissions
Variable Permissions

Anchor
Virtual Resource Permissions
Virtual Resource Permissions
Virtual Resource Permissions