Implementing Policy › Security › Security Considerations

Security Considerations

When you first install CA SDM, the system is set up to allow maximum access to any contact that does not have an explicit access type defined in the contact record. You may want to make additional modifications to the predefined security implementation. At a minimum, you should perform the following steps before you allow people to begin working with the application:

1. Review the predefined access types to determine a reasonable default for your system.

   Administrator is set as the default access type, which is not a good choice for most sites. For example, some sites offer read-only CA access to most members of the IT organization. If you set CMDB User as the default access type, you do not have to set the access type of new users unless they need additional privileges. Similarly, if most users require the privilege to write configuration information, you can select CMDB Analyst as the default access type.

2. Assign the access types of remaining contacts explicitly.

   For example, if you select CMDB User as the default access type, modify the contact records for your analyst contacts to assign an access type of analyst.

Note: For more information, see the Online Help.