Setting Network Level Permissions

Network Level Permissions provide the access required to change device configurations, run Auto Discovery, access the Scheduler, Approve jobs, and other permissions.

Networks must be assigned to a user or group in this area for access to the devices in the network. Permissions can be assigned per Network.

To ease management, default Network Permissions apply to every Network assigned to the user or group. Default Network Permission can be overridden on a network with the proper permissions.

For each network, the user or group must be assigned permissions based on the tasks to be completed in the network. For example, a user has access to three networks:

In Network A, the user has the ability to Create, Edit, and View workspaces for the network.
In Network B, the user cannot complete any of those tasks, but is able to Schedule and Approve jobs.
In Network C, the user can complete all tasks .

Note: Permissions set in one network do not overlap to other networks.

Whether you are setting permissions for a single user or a group of users, the steps are the same. Settings for a single user are set in the System Users module, in Set Permissions. Settings for a group are set in the System Group module, in Set Permissions.

The Network Permissions function allows you to complete the following actions for the user or group:

Associate users or groups to manage networks
Set permissions for each managed network

To associate a user or group to networks,

From the menu bar, access Tools -> System Administration. The System Administration window opens.
In the navigation pane, expand Global -> User Management.
Select System Users or System Groups . The right pane contains all available user/groups.
Selecting a user/group, then click Permissions. The Access Control Administration - [User ID] window opens.
In the tree menu, select Network Permissions. The right pane populates with any networks currently associated with the user/group.
At the bottom of the window, click Manage. The Select Network Resources - [User ID] window opens.
The Resources Available column is a list of all system networks. Select the networks to which the user or group will have permissions.

Note: A sequence of networks can be selected by holding down the Shift-key while clicking networks. Or, multiple, non-sequential networks can be selected by holding the Ctrl key while clicking network.
When you have finished selecting networks, click Add or Add all .
If you are removing permissions to a network, in the Selected Resources column, select the networks to which the user will no longer be associated, then click Remove All.
Once you have completed selecting the networks for the user, click OK. The Select Network Resources - [User ID] window closes.

You can now proceed with assigning network permissions for the user or group.

Setting Network Permissions

The Network Permissions window contains specific permissions for the Network, related Workspaces, Templates Devices, Jobs, and Views. Each area is segmented into specific permissions.

To set network permissions for a user,

After selecting a user/group, click Permissions.... The Access Control Administration - [User ID] window opens.
In the tree menu, select Network Permissions. Available networks display in the right pane. Expand Network Permissions, and select the network for which permissions will be set. The right pane populates and will look like the following:
Select the areas for which the user are to have access.
If the user/group does not require one or more of the included task permissions, click that related check box to de-select the option.
Repeat steps 3 and 4 for each area to which the user/group requires access.
If a user/group requires access to all network options in the Access Control Administration window, at the bottom of the window, click Select All.
When finished, click Apply. The window remains open allowing you to set other permissions. Or... If you are not making changes to the other permission level settings, click Close.


Section	Description
Override Credentials	Allows you to set the permission for the user to update the existing credentials
Manage user access	Allows access to designate user access
Manage Templates	Allows access to Create or Modify templates that reside in the Automation Library. By default, you can View existing templates.
Manage Queries	Allows access to manage the Queries in the Automation Library
Manage Compliance	Allows access to manage Compliance
Network	Allows the user/group to Edit, Delete or View networks details. By default, if you are provided Edit or Delete permissions, View is automatically set.
Workspace	Allows the user/group to Create, Edit, Delete or View workspaces. By default, if you are provided Create, Edit or Delete permissions, View is automatically set.
Device	This allows the user/group to Create and Edit devices. The View Details check box gives the user/group the ability to see the device properties. The View passwords check box allows user/group to see the passwords that must be used to access the device properties. Manage OS check box allows the user/group to make changes to the OS of the device. Assign Credentials , Run Non-Scheduled, and Run Cut-Throughs allows users to execute these operations if selected. Access to Configlet, Interface, and Command editor also can be controlled through Edit devices option. Access to Pre-Post Configuration Analysis can also be controlled through Edit devices option. Note: By default, when a user/group is given permissions to View Networks and Workspaces, they are able to view their devices.
Job	Allows the user/group to Approve or Schedule jobs that are created for the device config. All non-sysadmin users are having Schedule a job access to edit only their job. Manage Users/Groups option present in System Permission can control whether non-sysadmin user has rights to Schedule other users job. All non-sysadmin users are having Approve access can approve only their job. Manage Users/Groups option present in System Permission can control whether non-sysadmin user has rights to edit/approve other users job.
View	Allows the user/group to Create, Edit or Delete Views of the network

To change network permissions for a user,

Once network permissions for a user/group have been set, they can be edited as the role of the user/group changes. Permissions are changed by editing the set of permissions currently selected for the user.

After selecting a user/group, open the Access Control Administration - [User ID] window.
Select Network Permissions . The right pane populates with the current permission settings for the user/group.
Select a Network. The right pane populates with permission settings.

Important: To clear all existing check marks from the check boxes, click Reset.
Make the changes by selecting and de-selecting from the available options in the Set Permissions for Network window.
When finished, click Apply. The window remains open allowing you to edit other permissions. If you are not making changes to the other permission level settings, click Close. The System Administration window remains.