Implementing Policy › Data Partition Associations › Configure Knowledge Management Data Partition Constraints for Role-Based Permissions

Configure Knowledge Management Data Partition Constraints for Role-Based Permissions

Knowledge Management data partitions are enabled to let you use group and role permissions by default in CA SDM. If you are upgrading from a previous release, the migration tool updates your data partition constraints.

If you used custom data partition constraints to manage knowledge permissions in a previous release, update the constraints manually for the O_INDEXES and SKELETONS tables. You can view the default data partition constraints and apply the changes, as appropriate to your environment.

To update data partition constraints

1. On the Administration tab, browse to Security and Role Management, Data Partitions, Data Partition Constraints.

   The Data Partition Constraints List appears.

2. Click Show Filter.

   The search filter appears.

3. Enter Service Desk Analyst in the Data Partition search.
4. Enter O_INDEXES in the Table search.
5. Click Search.

   The search results appear.

6. Click the View constraint type.

   The Data Partition Constraint Detail page appears.

7. Click Edit.

   The Update Data Partition Constraint page appears.

8. Modify the Constraint tab to replace "READ_PGROUP in @root.pgroups" as follows:

   READ_PGROUP in @root.pgroups OR
   

   READ_PGROUP.[pgroup]contained_roles.role IN @root.id
   

   Save the constraint.

9. Open the Delete and Pre-Update constraint types from the Data Partition Constraints List.
10. Modify the Constraint tab to replace "WRITE_PGROUP in @root.pgroups" in Delete and Pre-Update as follows:

    WRITE_PGROUP in @root.pgroups OR WRITE_PGROUP.[pgroup]contained_roles.role IN @root.role
    

11. Save the constraints.
12. Repeat the steps to update the View, Delete, and Pre-Update constraints in the SKELETONS table in your data partition.

    The data partition constraints are updated.