Administer Advanced CA EEM Security › How to Transition Roles Used in Active Directory to CA EEM › Grant Permissions to the Environment Configuration Administrators Group

Grant Permissions to the Environment Configuration Administrators Group

You can grant permissions to the Environment Configuration Administrators custom group by adding this group to selected policies and selecting the required actions.

Follow these steps:

1. Log in to the CA Process Automation application in CA EEM.
2. Click the Manage Access Policies tab.
3. Grant to the ConfigAdmin group the ability to log in to CA Process Automation and display the Home page.
   1. Click the Product User link under Access Policies.
   2. Click the PAM40 User Login Policy.
   3. Select Application Group for Type under Enter/Search Identities, click Search Identities, and click Search.
   4. Select the custom group, ConfigAdmin, and click the down arrow.
   5. Select Console_Login for the new identity.
   6. Click Save.
4. Grant to the ConfigAdmins group the permissions to lock an environment and take any action that requires the environment to be locked.
   1. Click the Environment link under Access Policies.
   2. Click the PAM40 Environment Policy link in the Policy Table.
   3. Add the Identities. Search for groups. Specify Application Group for type, click Search Identities, and click Search.
   4. Select ConfigAdmin and click the down arrow.
   5. Select Environment_Configuration_Admin (Configuration Administrator) permission.
   6. Click Save. Click Close.
5. Grant to the ConfigAdmin group the permissions to access the Configuration tab and install Orchestrators and agents.
   1. Click Configuration Browser.
   2. Click PAM40 Configuration Policy.
   3. Search for ConfigAdmin and add the group to Selected Identities.
   4. Select Client_Configuration_User (View Configuration Browser) and Configuration_Installations.
6. Click Close.