Configuring Role-Based Security › How to Configure Role-Based Security

How to Configure Role-Based Security

As an administrator, you manage users and user access privileges to services, alert queues, customers, and CA SOI features.

CA SOI integrates with CA EEM to manage the user authentication and configure the resource access. CA SOI adds users that are defined in CA EEM to product-specific user groups with configurable privileges and access levels.

The access privileges determine the features user group can access: CA SOI features, services, customers, and alert queues. For example, a person responsible for monitoring the Payroll Service may need to view or access only HR-related services. Likewise, if CA SOI is monitoring services for several internal or external customers, each customer should have access to their own information only.

Note: For more information about installing CA EEM to integrate with CA SOI, see the Implementation Guide. For more information about the CA EEM functionality, see the CA EEM documentation. The documentation is provided on the CA SOI bookshelf.

You create and use different administrative users to manage the product. The only user that is defined in CA SOI before you configure the role-based security is the user that was created during the installation ("samuser" by default). The samuser is a super user with all privileges. Use samuser for the initial login and to configure user access. You can also use samuser if CA EEM connectivity is lost. Otherwise, you create and use a different administrative user for managing the product. The samuser has limitations that prevent it from being a long-term management solution, including the following limitations:

• It cannot set persistent Operations Console preferences.
• It cannot run reports.
• It cannot log in to USM Web View.

For non-administrator user groups, you manage the user group access to services, alert queues, and customers.

Use this scenario to guide you through the process:

1. View the access privileges for the current user groups.
2. Populate the users in CA EEM by either creating or importing users.
3. Create the user groups, assign privileges, add users to the user group, and define users in BusinessObjects for report access.
4. Manage the user groups in CA SOI to define user group privileges to give the appropriate level of access to each group role.
5. Manage the user group access to services.
6. Manage the user group access to alert queues.
7. Manage the user group access to customers.