Configuring Role-Based Security › How to Configure Role-Based Security › Manage User Group Access to Customers › Example: User Group Access to Customers

Example: User Group Access to Customers

The following example shows how both service access and customer access limit the availability of services to user groups.

For a user group to see customer services, the user group must meet the following requirements:

• The user group must have access privileges to view the services.
• The services must be associated with a customer.
• The user group must have access privileges to the customer.

The following graphic shows that the viewable customer services is the intersection between the user group service access and the customer service association. User Group Service Access includes all services that the user group has access privileges to view. Customer Service Association includes all services that are assigned to a customer.

The user group sees the Viewable Customer Services on the Operation Console Customer tab. The user group sees the User Group Service Access (all services to which they have access) on the Services tab.

For example, an administrator defined the following items in CA SOI:

User Groups: Operator1, Operator2, Operator3, Admin

Services Available: Finance, Operations, Sales

Customers: RegionUS, RegionEU

Customer Priorities: RegionUS=8, RegionEU=10

The administrator assigns the RegionEU customer a higher priority than RegionUS.

Customer Service Access: The administrator assigns the following services to the customers:

Region1: Sales, Finance, Operations

Region2: Finance, Sales

The following table shows the user groups, service access, and customer assignments that are set by the CA SOI administrator:

The following table shows the user groups and what each user group sees on several Operations Console tabs, based on the user group service and customer access:

The Operator1 user group sees only Operations and Sales in the Customers Tab. Operator1 is associated with the Region1 customer, which has service access to Finance, Operations, and Sales. However, the Operator1 user group is limited to only Operations and Sales service access; therefore, Operations and Sales are the only services Operator1 can see.

The Operator2 user group sees only Finance services in the Customers tab. The Operator2 user group has access to only Finance and Operations services and its customer association (Region2) has access to only Finance and Sales. Therefore, Operator2 is limited both by its user group access and by its customer access to view Finance only.

The Operator3 user group does not see any services. Although Operator3 has service access to Operations, the Operator3 user group is not associated with a customer (Region1 or Region2). Therefore, Operator3 cannot view any services associated with either customer.

The Admin user group can view all services and customers; therefore, the Admin user group sees all services.

Alert Queues: QueueUS, QueueEU, QueueSA