Add a Global Permission

You can use global permissions to give a user or group privileges for all objects in all inventory hierarchies in your deployment.

Important: Use global permissions with care. Verify that you really want to assign permissions to all objects in all inventory hierarchies.

Prerequisites

To perform this task, you must have Permissions.Modify permission privileges on the root object for all inventory hierarchies.

Procedure

1. Click Administration and select Global Permissions in the Access Control area.
2. Click Manage, and click the Add permission icon.
3. Select the user or group that will have the privileges defined by the selected role.
   1. From the Domain drop-down menu, select the domain for the user or group.
   2. Type a name in the Search box or select a name from the list.
      The system searches user names, group names, and descriptions.
   3. Select the user or group and click Add.
      The name is added to either the Users or Groups list.
   4. (Optional) Click Check Names to verify that the user or group exists in the identity source.
   5. Click OK.
4. Select a role from the Assigned Role drop-down menu.
   The roles that are assigned to the object appear in the menu. The privileges contained in the role are listed in the section below the role title.
5. Decide whether to leave the Propagate to children check box selected.
   If you assign a global permission and do not select Propagate, the users or groups associated with this permission do not have access to the objects in the hierarchy. They only have access to some global functionality such as creating roles.
6. Click OK.