Enterprise Administration Guide › Administering CA ControlMinder Enterprise Management › Administrative Scoping › Admin Roles in CA ControlMinder Enterprise Management

Admin Roles in CA ControlMinder Enterprise Management

Predefined admin roles in CA ControlMinder Enterprise Management provide a basic set of admin roles that you can assign to administrators in your enterprise according to your requirements. Out-of-the-box, CA ControlMinder Enterprise Management comes with the following admin roles:

• AC Host Manager—Responsible for the definition of hosts and logical host groups.

  This admin role lets users create hosts and host groups, assign hosts to host groups, and modify them. This role does not let users define policies or deploy policies but does let users view them and provides access to World View.

• AC Policy Deployer—Responsible for the deployment of policies across the environment.

  This admin role lets users assign policies to hosts and host groups, upgrade and downgrade policies, reset host configuration, and access the deployment audit. This role lets users view policies and hosts but not define them and provides access to World View.

• AC Policy Manager—Responsible for creating policies.

  This admin role lets users create, modify, view, and delete policies. This role also lets users view policies and access the World View but does not let them deploy policies to hosts or host groups.

• AC User Manager—Responsible for user management in CA ControlMinder Enterprise Management: creating and managing users and groups, and assigning CA ControlMinder Enterprise Management roles to users.

  Note: The CA ControlMinder User Manager cannot create new admin roles. Only the System Manager can create new admin roles.

• System Manager—Responsible for managing CA ControlMinder Enterprise Management.

  A user with this admin role can perform, create, and manage all tasks in CA ControlMinder Enterprise Management.

  Use this role for the implementation phase to define the actual admin roles in your organization and for emergency situations. We recommend that you assign this role to a minimal number of users, ideally only one user, and closely monitor the user actions.

• Reporting—Responsible for managing the English reports. A user with this role can schedule and view reports.
• UNAB Administrator—Responsible for managing UNAB. A user with this role can configure UNAB hosts and host groups, manage login authorization policies, and resolve migration conflicts.

  Note: A user that is assigned the System Manager role is also assigned the UNAB Administrator role.

• CA ELM User—Responsible for viewing CA User Activity Reporting reports. A user with this role can view CA User Activity Reporting reports.
• CA ELM Admin—Responsible for managing CA User Activity Reporting reports. A user with this role can administer the CA User Activity Reporting reports in CA ControlMinder Enterprise Management and can manage the connection to the CA User Activity Reporting server.
• Delegation Manager—Responsible for delegating work items. A user with this role can delegate work items to users.
• Self Manager—Responsible for managing their own user account. A user with this role can perform administrative actions on their account: change the account password, modify their user profile, view their assigned roles, submitted tasks, and the items that are waiting for their approval.

  Note: By default, every user in the system is assigned the Self-Manager role.