Configuring Role-Based Security › How to Configure Role-Based Security › Create User Groups › Define a User Group and Group Privileges

Define a User Group and Group Privileges

You assign feature privileges, service access, and alert queue access at the group level. A user group defines the access level for users in the group.

You can use the predefined groups that are provided with CA SOI, customize the predefined groups, or you can create your own user groups to use more specialized roles. Adding privileges during group creation defines what features, services, alert queues, and so on are available to users in the group.

Note: By default, each user group has access to all services and alert queues, but each user group has different feature privilege sets.

Follow these steps:

1. Log in to the Operations Console:
   • If you have not defined any administrator users, log in as the default user defined during installation ("samuser" user by default). Refer to the Installation Worksheet in the Implementation Guide for credentials.
   • If you have defined an administrator user, log in as that administrator.
2. Click the Users tab in the left pane.
3. Click the New User Group icon .
4. Enter a name for the group, and select the existing group to use as a template for assigning privileges in the Privilege Set drop-down list.

   You must select either Operator or Administrator as a starting point for assigning group privileges.

   A list of privileges appears that are available for the privilege set you selected. Privileges are divided into folders corresponding to the functional areas of the product. Each privilege contains a detailed description, and all privileges are disabled by default.

   Select the minimum privileges necessary for the group to manage their services, alert queues, and customers that their job function requires.

5. Expand all privileges, click the check boxes next to the privileges to enable for the group, and click OK.

   Note: Select the Enabled check box in a parent folder to enable its children automatically.

   The group is defined. The privileges appear on the Privileges tab in the right pane, where you can click Add/Remove to modify the privileges.