Administer Advanced CA EEM Security › Customizing User Access with CA EEM Policies › How to Customize Access for a Specified User › Add the User to Selected Default Policies

Add the User to Selected Default Policies

You can grant CA Process Automation permissions to a user identity in either or both of the following ways:

• Assign a user group to the user account.
• Add the user account to selected policies. In each policy, assign selected actions to the user identity

If you are working with custom policy and fine-grained user roles, we recommend that you grant basic access by assigning the PAMUsers group to the user account and then extending that access with policy action assignments.

If you prefer to grant access with policies alone, begin by providing basic access. Add the user account name to the following policies and actions:

• PAM40 User Login Policy: Console-Login (User)
• PAM40 Environment Policy: Environment_Library_User (User)
• PAM40 Library Browser Policy: LibraryBrowser_User (Library Browser User)

You can grant fine-grained access to the Operations tab. You can limit user access to specified actions on specific objects types.

Follow these steps:

1. Browse to CA EEM and log in.
2. Click the Manage Access Policies tab.
3. Add the user to the PAM40 User Login Policy.
   1. Click the link for Product User under Access policies.
   2. Click the PAM40 User Login Policy link in the Policy Table.
   3. Set Type to User, and click Search Identities.
   4. Click Search.
   5. Select the user identifier from the displayed list and click the down arrow.
   6. Select Console-Login (User) for the user you added.
   7. Click Save and click Close.
4. Add the user to the PAM40 Environment Policy.
   1. Click the link for Environment under Access policies.
   2. Click the PAM40 Environment Policy link in the Policy Table.
   3. Set Type to User, and click Search Identities.
   4. Click Search.
   5. Select the user identifier from the displayed list and click the down arrow.
   6. Select Environment_Library_User (User) for the user you added.
   7. Click Save and click Close.
5. Add the user to the PAM40 Library Browser Policy.
   1. Click the link for Library Browser under Access policies.
   2. Click the PAM40 Library Browser Policy link in the Policy Table.
   3. Set Type to User, and click Search Identities.
   4. Click Search.
   5. Select the user identifier from the displayed list and click the down arrow.
   6. Select LibraryBrowser_User (Library Browser User) for the user you added.
   7. Click Save and click Close.
6. Grant the user access to two objects on the Operations tab. Add the user to the PAM40 Operations Policy and specify only two actions.
   1. Click the link for Operations under Access policies.
   2. Click the PAM40 Operations Policy link in the Policy Table.
   3. Set Type to User, and click Search Identities.
   4. Click Search.
   5. Select the user identifier from the displayed list and click the down arrow.
   6. Select Operations_Datasets (Datasets) for the user you added.
   7. Select Operations_Resources (Resources) for the user you added.
   8. Click Save and click Close.