Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

<ul> <li>
  • Create,
  • read,
  • update,
  • and
  • delete

Role Name

Available Functions

Contains Roles

Anchor
ops_admin
ops_admin
ops_admin

All functions; this is the Universal Controller administrator role. The easiest way to assign full permissions to a user is to add the user to the Administrator Group, which by default is assigned the ops_admin role.
 

Note
titleNote

The ops_admin role contains all other roles. If a user is assigned the ops_admin role, no other roles need to be assigned to that user, and unassigning any other role from the user will not revoke that role.


  • ops_agent_cluster_admin
  • ops_audit_view
  • ops_bundle_admin
  • ops_dba
  • ops_email_admin
  • ops_filter_global
  • ops_filter_group
  • ops_forecast_view
  • ops_imex
  • ops_ldap_admin
  • ops_multi_update
  • ops_oms_admin
  • ops_peoplesoft_admin
  • ops_promotion_admin
  • ops_property_admin
  • ops_report_admin
  • ops_restore_version
  • ops_sap_admin
  • ops_server_operation_admin
  • ops_service
  • ops_snmp_admin
  • ops_sso_admin
  • ops_universal_event_template_admin
  • ops_universal_template_admin
  • ops_user_admin

Anchor
ops_agent_cluster_admin
ops_agent_cluster_admin
ops_agent_cluster_admin

Create, read, update, and delete agent clusters.
 
(Also see Agent Cluster Permissions, below.)


Anchor
ops_audit_view
ops_audit_view
ops_audit_view

Read Audits.


Anchor
ops_bundle_admin
ops_bundle_admin
ops_bundle_admin

Html bobswift
Html bobswift
.
<li> View 

Promotion Targets

Html bobswift
, including 

agent mappings

Html bobswift
.
<li> View 

Promotion History

Html bobswift
.
<li> View a record's 

list of bundles

Html bobswift
.
<li> View 

Promotion Schedules

Html bobswift. <li> Html bobswift
  • .
<li>
Html bobswift
.
<li> Generate a 

Bundle Report

Html bobswift. </ul>


(Also see Bundle Permissions and Promotion Target Permissions, below.)


Anchor
ops_dashboard_global
ops_dashboard_global
ops_dashboard_global

Create, update, and delete Dashboard Details with Everyone visibility; updating includes updating Dashboard visibility.


Anchor
ops_dashboard_group
ops_dashboard_group
ops_dashboard_group

Create, update, and delete Dashboard Details that are visible for a group in which this user is a member; updating includes updating Dashboard visibility.


Anchor
ops_dba
ops_dba
ops_dba

Create, update, delete Database Connections.
 
(Also see Database Connection Permissions, below.)


Anchor
ops_email_admin
ops_email_admin
ops_email_admin

Create, read, update, delete Email Connections.
 
(Also see Email Connection Permissions, below.)


Anchor
ops_filter_global
ops_filter_global
ops_filter_global

Create Filters with Everyone visibility.


Anchor
ops_filter_group
ops_filter_group
ops_filter_group

Create Filters that belong to a group of which this user is a member.


Anchor
ops_forecast_view
ops_forecast_view
ops_forecast_view

Read Forecast Calendar, Forecasts List, and Forecast Details.
 

Note
titleNote

Users also can read forecast information, without being assigned this role, if they have Read permission for the Task specified in the Forecast Details.



Anchor
ops_imex
ops_imex
ops_imex

List Import/Export XML.


Anchor
ops_ldap_admin
ops_ldap_admin
ops_ldap_admin

Read and update LDAP Settings.


Anchor
ops_multi_update
ops_multi_update
ops_multi_update

Update multiple records.


Anchor
ops_oms_admin
ops_oms_admin
ops_oms_admin

Create, update, and delete OMS Servers.


Anchor
ops_peoplesoft_admin
ops_peoplesoft_admin
ops_peoplesoft_admin

Create, read, update, and delete PeopleSoft Connections.
 
(Also see PeopleSoft Connection Permissions, below.)


Anchor
ops_promotion_accept_bundle
ops_promotion_accept_bundle
ops_promotion_accept_bundle

Accept bundles being promoted to a target server. (The Accept Bundle command is executed on the target server automatically as part of the Promote and Promote Bundle commands and does not involve user interaction.)


Anchor
ops_promotion_admin
ops_promotion_admin
ops_promotion_admin

html-bobswift


<ul> <li>
  • Create,
  • read,
  • update,
  • and
  • delete
Html bobswift
  • ,
  • including
  • agent
  • mappings.
<li> View

Bundles

Html bobswift. <li> Html bobswift
  • .
<li> Html bobswift
  • .
<li>
Html bobswift
 or 
Html bobswift
 of a bundle.
<li> Reschedule, cancel, and delete 

Promotion Schedules

Html bobswift. <li> Html bobswift. <li> Accept bundles being promoted to a target server. (The <b>Accept Bundle</b> command is executed on the target server automatically as part of the <b>Promote</b> and <b>Promote Bundle</b> commands and does not involve user interaction.) </ul>
  • .
  • Accept bundles being promoted to a target server. (The Accept Bundle command is executed on the target server automatically as part of the Promote and Promote Bundle commands and does not involve user interaction.)
Note
titleNote

By default, the ops_promotion_admin role also grants Read permission for any type of definition that can be added to a Bundle, given the expectation that a promotion administrator would review the content of a Bundle before promoting it. To change this default behaviour, see the Promotion Read Permission Required Universal Controller property.

 
(Also see Bundle Permissions and Promotion Target Permissions, below.)

  • ops_promotion_accept_bundle

Anchor
ops_property_admin
ops_property_admin
ops_property_admin

Read, update, and delete Universal Controller system properties and Password Settings.


Anchor
ops_report_admin
ops_report_admin
ops_report_admin

html-bobswift

<ul> <li>
  • Create,
  • read,
  • update,
  • and
  • delete
any

report

Html bobswift
, regardless of 

visibility

Html bobswift
, in addition to the roles granted by the 
Html bobswift
  •  role.
<li>
  • Create,
  • update,
  • and
  • delete
Html bobswift
 with Everyone visibility and 

Dashboard Details

Html bobswift that are visible for a group in which this user is a member; updating includes updating Dashboard visibility. </ul>
  •  with Everyone visibility and Dashboard Details that are visible for a group in which this user is a member; updating includes updating Dashboard visibility.


The Strict Report Create Constraints Universal Controller system property specifies whether or not to restrict report creation only to users with the ops_admin, ops_report_admin, ops_report_group, or ops_report_global role.
 
The Strict Dashboard Create Constraints Universal Controller system property specifies whether or not to restrict Dashboard creation only to users with the ops_admin, ops_report_admin, ops_dashboard_group, or ops_dashboard_global role.

  • ops_dashboard_global
  • ops_dashboard_group
  • ops_report_global
  • ops_report_group
  • ops_report_publish
  • ops_widget_admin

Anchor
ops_report_global
ops_report_global
ops_report_global

Create global reports.


Anchor
ops_report_group
ops_report_group
ops_report_group

Create reports that belong to a group to which this user is a member.


Anchor
ops_report_publish
ops_report_publish
ops_report_publish

Publish reports. (This role was applicable only to the Controller 5.x release.)


Anchor
ops_restore_version
ops_restore_version
ops_restore_version

Restore old versions of records.


Anchor
ops_sap_admin
ops_sap_admin
ops_sap_admin

Create, read, update, and delete SAP Connections.
 
(Also see SAP Connection Permissions, below.)


Anchor
ops_server_operation_admin
ops_server_operation_admin
ops_server_operation_admin

Run Server Operations.


Anchor
ops_service
ops_service
ops_service


Anchor
ops_snmp_admin
ops_snmp_admin
ops_snmp_admin

Create, read, update, and delete SNMP Managers, to which the Controller sends SNMP notifications.
 
(Also see SNMP Manager Permissions, below.)


Anchor
ops_sso_admin
ops_sso_admin
ops_sso_admin

Read and update Single Sign-On Settings.


Anchor
ops_universal_template_admin
ops_universal_template_admin
ops_universal_event_template_admin

Create, read, update, and delete Universal Event Templates.
  • ops_universal_event_template_view

Anchor
ops_universal_template_view
ops_universal_template_view
ops_universal_event_template_view

Read Universal Event Templates.

Anchor
ops_universal_template_admin
ops_universal_template_admin
ops_universal_template_admin

Create, read, update, and delete Universal Templates (including Universal Template Event Templates).

  • ops_universal_template_view

Anchor
ops_universal_template_view
ops_universal_template_view
ops_universal_template_view

Read Universal Templates (including Universal Template Event Templates).


Anchor
ops_user_admin
ops_user_admin
ops_user_admin

Create, read, update, and delete users and groups.


Anchor
ops_widget_admin
ops_widget_admin
ops_widget_admin

Create, update, and delete Widgets.


...

<ul> <li>
  • ALL:
  • Grants
  • permission
  • to
  • issue
  • any
  • command.
<li>
  • Promote
  • Bundle:
  • Grants
  • permission
  • to
  • promote
  • a
  • Bundle.
</ul>

For the ALL or Promote Bundle command:

  • User can promote a Bundle matching both the specified name wildcard and business service membership, assuming the user has Read permission for the Bundle.
  • User can Cancel, Reschedule, or Delete a Promotion Schedule associated with a Bundle matching both the specified name wildcard and business service membership, assuming the user has Read permission for the Bundle.

Options

Description

Create

Grants permission to create a Bundle matching both the specified name wildcard and business service membership, including the use of the Create Bundle By Date and Create Bundle By Business Service commands.

Read

Grants permission to read a Bundle matching both the specified name wildcard and business service membership.

  • User can run a Bundle Report for a Bundle matching both the specified name wildcard and business service membership.
  • User can Read a Promotion Schedule associated with a Bundle matching both the specified name wildcard and business service membership.

Update

Grants permission to update a Bundle matching both the specified name wildcard and business service membership, including the use of the Add To Bundle command.

Delete

Grants permission to delete a Bundle matching both the specified name wildcard and business service membership.

Commands

Html bobswift

...

Options

Description

Create

Task instances are created automatically when the task launches, so the Create permission does not appear.

Read

Grants permission to read a Task Instance

Update

Grants permission to update certain fields on a Task Instance.

Delete

Grants permission to delete a Task Instance.

Commands

For command descriptions, see Manually Running and Controlling Tasks.

html-bobswift

<ul> <li>

  • ALL:
  • Grants
  • permission
  • to
  • issue
  • any
  • command.
<li>
  • Cancel:
  • Grants
  • permission
  • to
  • cancel
  • a
  • Task
  • Instance.
<li>
  • Clear
  • All
  • Dependencies:
  • Grants
  • permission
  • to
  • clear
  • all
  • dependencies
  • on
  • a
  • Task
  • Instance.
<li>
  • Clear
  • Predecessors:
  • Grants
  • permission
  • to
  • clear
  • all
  • predecessors
  • on
  • a
  • Task
  • Instance.
<li>
  • Clear
  • Exclusive:
  • Grants
  • permission
  • to
  • clear
  • all
  • mutual
  • exclusive
  • dependencies
  • from
  • a
  • Task
  • Instance.
<li>
  • Clear
  • Resources:
  • Grants
  • permission
  • to
  • clear
  • all
  • resource
  • dependencies
  • of
  • a
  • Task
  • Instance.
<li>
  • Clear
  • Time
  • Wait/Delay:
  • Grants
  • permission
  • to
  • clear
  • all
  • Wait
  • To
  • Start
  • and
  • Delay
  • On
  • Start
  • specifications
  • for
  • a
  • Task
  • Instance.
<li>
  • Force
  • Finish:
  • Grants
  • permission
  • to
  • force
  • finish
  • a
  • Task
  • Instance.
<li>
  • Force
  • Finish/Cancel:
  • Grants
  • permission
  • to
  • force
  • finish/cancel
  • a
  • Task
  • Instance.
<li>
  • Hold:
  • Grants
  • permission
  • to
  • put
  • a
  • Task
  • Instance
  • on
  • hold.
<li>
  • Insert
  • Task:
  • Grants
  • permission
  • to
  • insert
  • a
  • task
  • on
  • the
  • workflow
  • monitor
  • of
  • a
  • workflow
  • Task
  • Instance.
<li>
  • Mark
  • as
  • Satisfied:
  • Can
  • mark
  • a
  • dependency
  • as
  • satisfied.
<li>
  • Re-run:
  • Grants
  • permission
  • to
  • re-run
  • a
  • Task
  • Instance.
<li>
  • Release:
  • Grants
  • permission
  • to
  • release
  • a
  • Task
  • Instance
  • from
  • hold.
<li>
  • Release
  • Recursive:
  • Grants
  • permission
  • to
  • release
  • a
  • workflow
  • and
  • all
  • its
  • tasks
  • from
  • hold.
<li>
  • Retrieve
  • Output:
  • Grants
  • permission
  • to
  • execute
  • the
  • Retrieve
  • Output
  • button.
<li>
  • Set
  • Priority
  • Low:
  • Grants
  • permission
  • to
  • change
  • the
  • priority
  • of
  • a
  • task
  • to
  • Low.
<li>
  • Set
  • Priority
  • Medium:
  • Grants
  • permission
  • to
  • change
  • the
  • priority
  • of
  • a
  • task
  • to
  • Medium.
<li>
  • Set
  • Priority
  • High:
  • Grants
  • permission
  • to
  • change
  • the
  • priority
  • of
  • a
  • task
  • to
  • High.
<li>
  • Set
  • Completed:
  • Grants
  • permission
  • to
  • set
  • a
  • Manual
  • Task
  • Instance
  • status
  • to
  • completed.
<li>
  • Set
  • Started:
  • Grants
  • permission
  • to
  • set
  • a
  • Manual
  • Task
  • Instance
  • status
  • to
  • a
  • new
  • started
  • time.
<li>
  • Skip:
  • Grants
  • permission
  • to
  • skip
  • a
  • Task
  • Instance.
<li>
  • Unskip:
  • Grants
  • permission
  • to
  • unskip
  • a
  • Task
  • Instance
  • selected
  • to
  • be
  • skipped.
</ul>
Note
titleNote

Universal Controller will initially check for command permission specifically for the task instance.

If no command permission is granted for the task instance, Universal Controller will check if command permission is granted for the parent workflow task instance, and then continue to check for command permission up the workflow task instance hierarchy.


...