Client Automation Security Features › Authorization › Overview of Permissions › Class Permissions

Class Permissions

Class permissions are the access rights you specify on class level. This means that the class-level permissions are the default rights for each object that is an instance of this class.

You must specify the class permissions for each security profile when you create a security profile. For all security classes, No Access is set by default. Security profiles with appropriate class permissions give you access rights to the system. You can specify this in the Class Permissions dialog.

Class permissions are globally applicable to all objects in an object class. If you want to restrict users on a specific object or folder in the Explorer, or grant extended access rights, use the Object Permissions dialog or the Security Group Permissions dialog, respectively.

Security classes are used for grouping objects of the same type. The security subsystem in CA Client Automation supports the following security classes:

• Discovered hardware (Computer)
• Users
• Computer Users
• Manager
• Servers
• Asset Groups
• Server Groups
• Domain Groups
• Queries
• Security Classes
• Security profiles
• Software packages
• Software procedures
• Procedures groups
• Job Containers
• Software Jobs
• Asset Jobs
• Modules
• Query Based Polices
• Event Based Policies
• OSIM Boot images
• OSIM OS images
• Engine
• Configuration Policies Computer
• Configuration Policies User
• External Directory Access
• Report Templates
• Inventory modules

The following security classes are used for class level only.

• MDB Access
• Enable Control Panel
• Enable Remote Control

Class level security means that every object or instance of a class will get the permission as defined for the class by default.