Creating Users and Assigning Permissions

From OpsWise Documentation Wiki

Open as PDF

In this exercise, we will create some users related to the Operations and Tech Support departments we created in the last exercise. We will also assign access and management rights via user roles and Opswise permissions:

• Permissions control who can add, change, delete and control OpsWise tasks, task instances, triggers, agents, calendars, and credentials.
• Roles are pre-defined groups of permissions that control access to users, reports (filters), and gauges. See Description of Roles for details.

Contents 1 Create New Users 2 Assign Permissions Via User Roles 3 Assign Specific Permissions to a User 4 Assign Permissions to Groups of Users

Create New Users

In this exercise, we will create three new users.

1. From the navigation pane, select Security > Users. You will see the default user, ops.admin.
2. Click New.
3. In the Name field, type OpMan (short for Operations Manager).
4. Fill in the remaining fields as follows:
   • First name=Ben
   • Lastname=Bernanke
   • Password=abc
5. Click Submit.
6. Add two more users:
   • TSMan, name=Tim Geithner, password=abc
   • OpClerk, name=Jimmy Smith, password=abc
7. To test one of the new users:
   1. Click the Logout button in the upper right corner of the display.
   2. Log back in using the OpMan/abc ID and password.
   3. Click on several options in the navigation pane. Since we have not assigned any permissions to OpMan, this user is prohibited from the following:
      • Viewing tasks, tasks instances, or triggers
      • Changing or deleting the dashboard or home page items, email or database connections, calendars or custom days, OpsWise groups.
      • The Security and administrative options do not display on the navigation pane.
   4. When you are finished, click Logout and log back in using ops.admin.

Assign Permissions Via User Roles

In this exercise, we will assign global permissions to a user by using roles.

1. Open the OpMan user and click the User Roles tab.
2. Click Edit.
3. This user is a manager so we will give him the admin roles. Ctrl-Click ops_admin and ops_report_admin and click the right-arrow .



4. Click Save.
5. Logout and log back in as OpMan. Note that this user has full permissions on everything because it was given the admin roles.

Assign Specific Permissions to a User

In this exercise, we are going to give TSMan limited permission, including rights to add, delete, change records that belong to the Tech Support group that we added in the previous exercise Creating OpsWise Groups.

1. Open the User, TSMan.
2. Click the Opswise Permissions tab and click New.
3. First we will give permission to view, add, update, and manually launch tasks.
4. In Type, select Task.
5. Select Create, Read, and Update.
6. In OpsWise Groups, select Tech Support.
7. Deselect Default Group. Hint: See Permissions Field Descriptions for more details.
8. In Commands, select Launch.



9. Click Submit.
Test the permissions by logging out again and logging back in as TSMan/abc. TSMan will be able to see the tasks assigned to the Tech Support group, and launch those tasks. However, he cannot see them on the Activity screen because he was not given permissions on Task Instances.

Assign Permissions to Groups of Users

In this exercise we will assign our last user to a group, then assign permissions to the group instead of to the user.

1. Open the user record OpClerk.
2. Click the Group Members tab.
3. Click New to add a new group.
4. Name the group Operations Clerks.
5. Right-click the down arrow and click Save.
6. While still displaying the Operations Clerks group, click OpsWise permissions and click New.
7. Assign the following permissions:
   • Type = Task Instance
   • Read, Update, Delete = Enabled
   • OpsWise Groups = Operations
   • Default Group = Disabled
   • Commands = All
     
   These permissions give the Operations Clerks full permissions on all activity (task instances) related to the Operations OpsWise group. In future, any users you assign to this user group will inherit these permissions.
8. Click Submit.
9. Log out and log back in as OpClerk and check the permissions.

Return to First Look menu.

For additional information, see:

• Security