Permissions by Tab

Administer Advanced CA EEM Security › Permissions Reference › Permissions by Tab

Permissions by Tab

The actions that are selected on predefined CA EEM policies grant permissions to tabs, palettes, folders, and automation objects. The following tables describe the permissions that each action grants to groups (identities) in the corresponding resource policies.

If you create custom policies from these resource classes, use the corresponding tables as a guide for assigning permissions.

Home Tab

Action Key (Localized Name)	Resource Class for Policy	Permissions
Console_Login (User)	Product User	Log in to CA Process Automation and use the Home tab.

Library Tab

The following table lists permissions in order from the lowest level to the highest level. To view the Library tab, you must have the LibraryBrowser_User permission and either the Environment_Library_User or the Environment_Library_Admin permission. For more information, see Permissions Dependencies.

Action Key (Localized Name)	Resource Class for Policy	Permissions
LibraryBrowser_User (Library Browser User)	LibraryBrowser (Library Browser)	View access to the Library tab.
Object_List (List)	Object	View folder or automation object in the Library Browser. Define customized library views.
Environment_Library_User (User)	Environment	Prerequisite to many Operations tab permissions. Access to Orchestrators added to environments. View, export, search automation objects in the Library tab if the access is set.
Object_Read (Read)	Object	Navigate a folder path and open any automation object in the corresponding designer orviewer. Implicit: List
Object_Edit (Edit)	Object	Edit a folder or an automation object in a folder. Implicit: Read, List
Object_Delete (Delete)	Object	Delete a folder or delete an automation object added to a folder. Implicit: Edit, Read, List
Object_Admin (Admin)	Object	Create a folder or any automation object. Implicit: Delete, Edit, Read, List
Environment_Library_Admin (Content Administrator)	Environment	Create, Delete, Edit, Read, and List on all automation objects in the Library tab.
Group_Config_Admin	Group Configuration	Access Group Config tab. See Permissions on Automation Objects for permissions granted on custom operators.

Designer Tab

Users with access to the Designer tab are typically also granted access to the Library tab. Designers need at least the following Library tab permissions to save a process they are designing:

LibraryBrowser_User
Environment_Library_User
Object_Edit (which includes the Object_List and the Object_Read permissions)

Action Key (Localized Name)	Resource Class for Policy	Permissions
Designer_User (Designer User)	Designer	View access to the Designer tab.

Operations Tab and Palettes

Designers require access to the Operations tab in the design environment; production users require access to the Operations tab in the production environment. To view the Operations tab, you must have either the Environment_Library_User or the Environment_Library_Admin permission. For more information, see Permissions Dependencies.

Action Key (Localized Name)	Resource Class for Policy	Permissions
Operations_Process_Watch (Process Watch)	Operations	Open the Process Watch palette in the Operations tab. View all the processes in the selected state, active schedules, active operators, and User Requests.
Process_Monitor (Monitor)	Process	Open a running process instance in the Process Designer. Monitor progress. Set breakpoints. Implicit: List
Process_Start (Start)	Process	Start a process instance. Implicit: Monitor, List
Process_Control (Control)	Process	Suspend, restart, resume, or abort process instances. Implicit: Start, Monitor, List
Operations_Schedules (Schedules)	Operations	View Active Schedules link in the Operations tab.
Agenda_Control (Control)	Agenda	Activate and deactivate a schedule on a touchpoint. Implicit: Read, List
Operations_Datasets (Datasets)	Operations	Open the Operations tab Datasets palette.
Dataset_Inspect (Inspect)	Dataset	View a dataset object and read the variable values in the dataset. Implicit: List
Dataset_Modify (Modify)	Dataset	Create, Edit, and Delete the dataset object. Implicit: Inspect, Read, List
Operations_Resources (Resources)	Operations	Open the Operations tab Resources palette.
Resources_Control (Control)	Resources	Lock unlock, take, return, or add a parameter to a resource. Add or remove a resource unit. Implicit: Read, List
Operations_User_Requests (User Requests)	Operations	Open the Operations tab User Requests palette.
Operations_Content_Packages (Content Packages)	Operations	Open the Operations tab Content Packages palette.
Operations_Task_List (Task List)	Operations	Use the Operations tab Task List link and view tasks for yourself, your group, or any group. Access your tasks from the Home tab.
StartRequestForm_Dequeue (Dequeue)	Start Request Form	Dequeue a process that a start request form put in the queue. Implicit: Start, List
StartRequestForm_Start (Start)	Start Request Form	Start a task that a start request form defines. Implicit: List
Execute	TouchPoint Security	Run scripts or programs in operators. The product derives the impacted operators from specified operator categories. The impact occurs when the target is a specified touchpoint in a specified environment.

Reports Tab

The following table lists the action relevant to using the Reports tab.

Action Key (Localized Name)	Resource Class for Policy	Permissions
Reports_User (Reports User)	Reports	Open the Reports tab Upload custom reports View or delete predefined, shared, or private reports.

Configuration Tab and Palettes

The following table lists the actions that impact permissions on the Configuration tab. To view the Configuration Browser on the Configuration tab, you must have the Client_Configuration_User permission. For more information, see Permissions Dependencies.

Action Key (Localized Name)	Resource Class for Policy	Permissions
Client_Configuration_User (View Configuration Browser)	Configuration Browser	View the Configuration tab Configuration Browser.
Environment_Configuration_Admin (Configuration Administrator)	Environment	Add New Group, Add Touchpoint, and Add Host Group in the Configuration Browser. Edit the configuration at the environment level, including security, properties, operator categories, custom operator groups, and triggers.
Domain_Admin (Administrator)	Domain	In the Configuration Browser palette, lock or unlock the Domain, add Environment, invoke Bulk Agent Removal, and invoke Bulk Touchpoint Removal. Edit the configuration at the Domain level, including security, properties, operator categories, custom operator groups, and triggers. Update the Orchestrator Resources folder and the Agent Resources folder contents in the Manage User Resources palette.
Configuration_User_Resources (User Resources)	Configuration Browser	Open the Configuration tab Manage User Resources palette and update the User Resources folder contents.
Configuration_Installations (Installations)	Configuration Browser	Open the Configuration tab Installation palette and start installing an agent, Orchestrator, or cluster node of an Orchestrator.

More information:

Permissions Dependencies