Previous Topic: Permissions on Automation ObjectsNext Topic: Filters for Permissions

Administer Advanced CA EEM Security › Permissions Reference › Permissions Dependencies

Permissions Dependencies

The following table describes the dependent resource class action (permission) for each resource class action in the predefined CA EEM policies for CA Process Automation.

Consider the dependencies when you assign only custom groups (without PAMUsers) to user accounts.

As the table summarizes, you can assign an Action Key in a custom policy for a Resource Class to a custom group. If you create such a custom policy, assign that custom group to a Dependent Actions Key.

Action Key
(Localized Name)

Resource Class for Custom Policy

Dependent Actions Key
(Localized Name)

Console_Login (User)

Product User

 

Reports_User (Reports User)

Reports

Console_Login (User)

Environment_Library_User (User)

Environment

Console_Login (User)

Environment_Library_Admin (Content Administrator)

Environment

Console_Login (User)

Environment_Configuration_Admin (Configuration Administrator)

Environment

Console_Login (User)

Domain_Admin (Administrator)

Domain

Console_Login (User)

Client_Configuration_User (View Configuration Browser)

Configuration Browser

Console_Login (User)

Configuration_User_Resources (User Resources)

Configuration Browser
  • Console_Login (User)
  • Client_Configuration_User (View Configuration Browser)
  • Domain_Admin (Administrator) for access to the Agent Resources and the Orchestrator Resources folders.

Configuration_Installations (Installations)

Configuration Browser

Console_Login (User)

LibraryBrowser_User (Library Browser User)

Library Browser
  • Console_Login (User)
  • Environment_Library_User (User) or Environment_Library_Admin (Content Administrator)

Operations_User_Requests (User Requests)

Operations
  • Console_Login (User)
  • Environment_Library_User (User) or Environment_Library_Admin (Content Administrator)

Operations_Process_Watch (Process Watch)

Operations
  • Console_Login (User)
  • Environment_Library_User (User) or Environment_Library_Admin (Content Administrator)

Operations_Task_List (Task List)

Operations
  • Console_Login (User)
  • Environment_Library_User (User) or Environment_Library_Admin (Content Administrator)

Operations_Schedules

(Schedules)

Operations
  • Console_Login (User)
  • Environment_Library_User (User) or Environment_Library_Admin (Content Administrator)

Operations_Resources

(Resources)

Operations
  • Console_Login (User)
  • Environment_Library_User (User) or Environment_Library_Admin (Content Administrator)

Operations_Datasets

(Datasets)

Operations
  • Console_Login (User)
  • Environment_Library_User (User) or Environment_Library_Admin (Content Administrator)

Operations_Content Packages

(Content Packages)

Operations
  • Console_Login (User)
  • Environment_Library_User (User) or Environment_Library_Admin (Content Administrator)
  • Object_List (List)
  • Object_Read (Read)
  • Object_Edit (Edit)
  • Object_Delete (Delete)
  • Object_Admin (Admin)

Object
  • Console_Login (User)
  • Environment_Library_User (User)

Agenda_Control (Control)

Agenda
  • Console_Login (User)
  • Environment_Library_User (User)
  • Object_List (List) with resource/folder

Note: If the object is created in the root folder, Object_List is not necessary.
  • Dataset_Inspect (Inspect)
  • Dataset_Modify (Modify)

Dataset
  • Console_Login (User)
  • Environment_Library_User (User)
  • Object_List (List) with resource/folder

Note: If the object is created in the root folder, Object_List is not necessary.
  • Process_Control (Control)
  • Process_Monitor (Monitor)
  • Process_Start (Start)

Process
  • Console_Login (User)
  • Environment_Library_User (User)
  • Object_List (List) with resource/folder

Note: If the object is created in the root folder, Object_List is not necessary.

Resources_Control (Control)

Resources
  • Console_Login (User)
  • Environment_Library_User (User)
  • Object_List (List) with resource/folder

Note: If the object is created in the root folder, Object_List is not necessary.
  • StartRequestForm_Start (Start)
  • StarRequestForm_Dequeue (Dequeue)

Start Request Form
  • Console_Login (User)
  • Environment_Library_User (User)
  • Object_List (List) with resource/folder

Note: If the object is created in the root folder, Object_List is not necessary.

Execute

Touchpoint Security
  • Console_Login (User)
  • Environment_Library_User (User)
  • Object_List (List) with resource/folder

Note: If the object is created in the root folder, Object_List is not necessary.

Group_Config_Admin

Group Configuration
  • Console_Login (User)
  • Environment_Library_User (User)
  • Object_List (List) with resource/folder
  • Object_Edit (Edit) with resource/folder

More information:

Permissions on Automation Objects

Permissions by Tab