Deploying Grouping Strategies › Creating Custom Groups to Monitor MSP Customers › Plan Permission Group Assignments

Plan Permission Group Assignments

Plan a strategy for assigning custom groups as permissions to CA Performance Center operators.

Permission groups are custom groups that organize managed items for purposes of data access. They are called custom groups until they are assigned to user accounts as permission sets.

Assigning custom groups as permissions has the following benefits:

• Lets users view data specifically within their area of responsibility
• Lets administrators restrict the users who can view data for security reasons

Follow these steps:

1. Make a list of MSP employees who will use CA Performance Center when it is fully deployed.

   Note: Each CA Performance Center operator requires a user account. User accounts should not be shared.

2. Use your list of MSP customers to organize staff assignments. For more information, see Organize MSP Customers by Service Tier.

   You can create a table to organize assignments. For example:

If multiple staff members are assigned to the same customer, they require the same permission group assignments.

1. Use the table you created to determine what permission groups are required to monitor all customers.

   In this example, you need two permission groups: Tier 1 and Tier 2. You can add managed items from all customer systems to these two custom groups.

2. Make a list that maps staff members to permission groups.

   The resulting list guides you when you create groups and assign them as permissions to user accounts. For example: