Creating and Managing User Accounts › User Accounts › Permission Groups and User Accounts

Permission Groups and User Accounts

The predefined groups (or system groups System groups organize managed items and maintain separation among items from data sources registered to the same CA Performance Center instance. They are created automatically to facilitate placement of items in custom groups, provide basic sets of user account permissions, and provide report context.) help you quickly organize performance data and allocate operator access to that data. However, a more secure and better managed system is based on custom groups that are assigned to users as permissions.

Permission groups comprise the scope of the managed items that each user can monitor. Administrators can create custom groups of managed items, such as applications, servers, networks, routers, and interfaces, to reflect each user’s area of responsibility. When they are assigned to a user account as permissions, custom groups are called permission groups.

You can assign multiple permission groups to each user during user account creation. For example, assign the permission groups 'North American Core Routers' and 'North American Critical Applications' to the same user account.

Note: As a best practice, do not assign the 'Collections' group as part of a user's permission groups. This group should not be used for reporting.

We recommend speaking with a CA technical representative to plan a strategy for creating a grouping and role structure. The best configuration meets your current requirements and is flexible enough to accommodate changes to your system.

More information:

Creating and Managing User Accounts

Types of Product Privilege

Types of Groups

User Account Parameters