Setting Device Level Permissions

Device level permissions determine the actions that the user or group is able to complete on a device and its details. Although the user or group (as a whole) has permissions set up to the group, the permissions per device are set up individually. The device setup is a two-part task:

• Selecting the devices the user or group is to have access to

• Setting the permissions explicitly for the device 

Note: Prior to setting device level permissions, keep in mind that device level permissions override all other permission levels.

First step: To assign devices for user or group access,

1. From the menu bar, access Tools -> System Administration. The System Administration window opens.

2. In the navigation pane, expand Global -> User Management.

3. Select System Groups . The right pane contains all available groups.

4. Select a group, then click Permissions. The Access Control Administration - [User ID or Group Name] window opens.

5. In the tree menu, select Device Permissions. The right pane populates only if the user or group has been given permissions to other devices.

6. Click Manage. The Select Device Resource window opens.

    

     

7. In the Resource Available column, select the Devices to which the user or group are to have permissions.

8. Click Add. The selected devices are moved to the Resources Selected column.

   Note: A sequence of devices can be selected by holding down the Shift key while selecting devices. Or... Multiple, non-sequential devices can be selected by holding the Ctrl key while selecting devices.

9. Repeat steps 7 and 8 for each device to which access is required.

10. If a user requires access to all devices , without making a selection, click Add All.

11. When finished, click OK. The Select Device Resource window closes.

The right pane reflects the devices that were selected in the Select Device Resource window. You can now select the explicit device permissions for the group.

Second step: Set device level permissions,

1. In the navigation pane, expand the Device Permissions folder. The devices listed are the same devices that were just selected in the Select Device Resource window.

2. Select a Device by double-clicking on the device name. The right pane populates with the Set permissions for [device name] options.

   

   These options represent the permissions that the user or group have for this specific device. There are two sections in the area:  

   • All permissions in both areas

   • One or more permissions from each area

   • Permissions from only one area

3. To select all options in an area, click the check box next to Device or Job.

   Or, to provide select options in each section, click the check box next to the required options.

4. To provide the user or group with all device permissions, click Select All. All options are checked. (This action can be reversed by clicking the De-select All button.)

5. When you have selected the appropriated options, click Apply at the bottom of the window. The Access Control Administration - [User ID or Group Name] window closes.

6. Repeat the above steps for each device.

Device	The Device section provides permissions for access to the config to Edit, View device passwords, View details, and Update the OS of the device. It also allows permissions for Assign Credentials, work with Run Non-scheduled tasks, and complete Run Cut-Throughs.
Job	The Job section provides the user or group with permission to Schedule and/or Approve jobs for the device.

The user or group can be assigned to:

Important: If you have assigned a device to a user or group to manage, the user or group is unable to complete any tasks specific to the device until you have set the explicit permissions.