background image

Introducing CMDB Solution

This chapter includes the following topics:

About CMDB Solution

About CMDB Solution 7.0 new features

Terminology

About CMDB Solution

CMDB (Configuration Management Database) Solution lets you model configuration
items, resources, and the relationships between them in a single, central database.
It lets you facilitate the identification of all components and relationships, and
to instigate any required changes. The solution actively manages resources
according to user-specified instructions in jobs, tasks, configuration policies, and
custom CMDB rules.

CMDB Solution has the following features and uses:

Define organizational groups and hierarchy.

Organizational resources such as departments and cost centers are used to
mirror your own organization's structure and hierarchy. CMDB Solution
hierarchy features and child to parent relationships are used to specify standard
settings throughout an organizational hierarchy. For example, a task that is
applied to a parent department can be automatically pushed down to child
departments. Setting up organizational resources should be the first thing
you do with CMDB Solution.

See

“About organizational resource types”

on page 43.

Define resources.

Resources such as assets and contracts are entered into the database using
predefined templates called resource types. The predefined resource types
should be used when possible. Predefined resource types leverage other

1

Chapter

Summary of Contents for Altiris CMDB Solution 7.0

Page 1: ...Altiris CMDB Solution from Symantec Users Guide Version 7 0 ...

Page 2: ...g its use copying distribution and decompilation reverse engineering No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors if any THEDOCUMENTATIONISPROVIDED ASIS ANDALLEXPRESSORIMPLIEDCONDITIONS REPRESENTATIONS AND WARRANTIES INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY FITNESS FOR A PARTICULAR PURPOSE...

Page 3: ...Symantec Corporation 350 Ellis Street Mountain View CA 94043 http www symantec com ...

Page 4: ...hat provides rapid response and up to the minute information Upgrade assurance that delivers automatic software upgrade protection Global support that is available 24 hours a day 7 days a week Advanced features including Account Management Services For information about Symantec s Maintenance Programs you can visit our Web site at the following URL www symantec com techsupp Contacting Technical Su...

Page 5: ...e Customer service information is available at the following URL www symantec com techsupp Customer Service is available to assist with the following types of issues Questions regarding product licensing or serialization Product registration updates such as address or name changes General product information features language availability local dealers Latest information about product updates and ...

Page 6: ...and countermeasures to prevent attacks before they occur Symantec Early Warning Solutions These services remove the burden of managing and monitoring security devices and events ensuring rapid response to real threats Managed Security Services Symantec Consulting Services provide on site technical expertise from Symantec and its trusted partners Symantec Consulting Services offer a variety of prep...

Page 7: ... 20 About base resource types 21 About data classes 21 About CMDB data classes 22 About data class attributes 24 About data class attribute parameters 24 About data input masks 25 About resource association types 26 Resource type relationships 26 About the resource data class summary page 27 Chapter 4 Using resources 29 About resources 29 Resource categories 30 About merging resources 30 About the...

Page 8: ...About scope based security 41 About security scoping for reports 42 Chapter 8 Using organizational resource types and resources 43 About organizational resource types 43 About hierarchal resource types 45 About organizational groups and views 45 Chapter 9 Using the CMDB interface 47 CMDB Global Settings page 48 Default values page 48 Default values page Data entry for default values page 48 Displa...

Page 9: ... task page 56 Duplicate Computer Merge task page 56 Duplicate User Merge task page 57 Inventory Clean Up page 58 Inventory to Asset Synchronization task page 58 Resource Merge Rule task page 59 Update network resource location task page 60 Update Organizational Hierarchy task page 61 Index 63 9 Contents ...

Page 10: ...Contents 10 ...

Page 11: ...es Define organizational groups and hierarchy Organizational resources such as departments and cost centers are used to mirror your own organization s structure and hierarchy CMDB Solution hierarchy features and child to parent relationships are used to specify standard settings throughout an organizational hierarchy For example a task that is applied to a parent department can be automatically pu...

Page 12: ...nizational data Clean up and configure data management with ready made configuration items See About CMDB configuration tasks on page 17 Create customized item actions and CMDB Rules to manage and manipulate data CMDB rules target a group of assets based on their type and properties and then make changes to them Out of the box configuration items address the most commonly required resource managem...

Page 13: ... classes Extendable resource model Organizational resource types can be associated with another resource of the same type For example users who have the same manager can be associated with each other Also the Location organizational resource type can be used to designate office locations specific buildings and floors Other predefined organization types include Cost Centers and Departments Organiza...

Page 14: ...eb parts and create new ones By creating portal pages you can customize the user interface for your specific job function PortalpagesandWeb parts You can choose to show or hide menu items depending on a user s security role For example you can give a user access to the Reports menu but not to the Manage menu You can also add menus and customize sub menus Role specific views Resources in the CMDB S...

Page 15: ... filters Association type filter lets you choose which association types you want to see displayed in the Resource Association Diagram Resource type filter lets you choose which resource types you want to see Resource Association Diagram lets you specify the number of levels and nodes to display It has three different formats tree hierarchy free form and static Nodes can be clicked and dragged to ...

Page 16: ...type data classes represent the fields in resources For example Data class attribute A component of a data class which is represented as a column of a table in a multi row data class or field Data class attribute parameter Parameters of a data class attribute which specify the characteristics of the attribute such as name description and maximum length of the attribute Item task An action that can...

Page 17: ... Inventory to asset data synchronization Default computer ownership Default computer location Duplicate computer merging Computers no longer in use About percentage ownership of resources Multiple users and cost centers can partly own the same asset To assign ownership percentages first you must allow assets to have multiple users Then you specify ownership by user department and cost center and s...

Page 18: ...created by users for managing data and tasks CMDB Solution configuration pages such as Synchronize Hierarchy Collections and Update Network Resource Location can be regarded as CMDB rules The pages are included in the solution by default You can create your own CMDB rules You can target a group of assets based on their type and properties and then make changes to them You must define the criteria ...

Page 19: ... association types Resource type relationships About the resource data class summary page About resource types Resource types are the templates for entering resource data into the Configuration Management Database All items that CMDB Solution monitors or managed are based upon a resource type For example the resource type Computer See About resources on page 29 You must have administrator rights t...

Page 20: ...types Although you can define your own resource types CMDB Solution includes many resource types that are predefined Predefined resource types contain the relevant associations fields and reports for a particular type of resource Resource types let you enter resource data into the Configuration Management Database See About resource types on page 19 Use the predefined resource types whenever possi...

Page 21: ...pe the same data classes are added to all resource types that are based on it s No special configuration is required to allow a resource to be a base resource type It occurs when you create another resource type and specify a base resource type for it Most predefined asset types are based on the resource type Asset Most predefined contract types are based on the resource type Contract resource typ...

Page 22: ...ers on page 24 You cannot modify or delete predefined data classes You can modify and delete the data classes that you define About CMDB data classes CMDB data classes are the templates for the data that is contained in the CMDB resource types See About data classes on page 21 Table 3 1 CMDB data classes Description Data class Contains the data classes for tracking asset merges concurrent licensin...

Page 23: ...etails for a contract or license Internal Reference The last date and time an asset barcode was scanned Last Barcode Scan Click the edit icon to associate an asset with a location To use reports including cost center information about the asset it must be associated with a location Location Location address Location Details Free text field for entering the name of the manufacturer of the resource ...

Page 24: ... class attributes define the data that data classes store After you add a data class attribute to a data class you can edit certain aspects of the attribute You can edit the description and control if it is hidden but you cannot delete the description from the data class A data class attribute cannot be added to a predefined data class See About data classes on page 21 See About data class attribu...

Page 25: ...rs on page 24 The following table lists and describes the characters that can be used in defining a data mask and their meaning Table 3 3 Data mask characters Meaning Character Any letter Entry required A Any letter Entry optional a Any digit or space Entry optional and not allowed 9 Any digit 0 through 9 Entry required and not allowed 0 Any letter digit space or Entry optional spaces are removed ...

Page 26: ...fined resource association types and you can also create your own See About the resource association type page on page 51 Resource type relationships Understanding the relationships between various resource types especially the crucial organizational resource types helps you understand dependencies within the Configuration Management Database Not all resource types can be directly associated with ...

Page 27: ...rce type User Company User Department User User Asset Creates no indirect associations Company Creates no indirect associations Cost Center Cost Center User Department Cost Center User Location Existing Users can be specified as Managers Manager Department Cost Center Department Location User About the resource data class summary page This resource data class summary page is applicable only to the...

Page 28: ...Using resource types About the resource data class summary page 28 ...

Page 29: ...fication Server can manage For example these items can include computers phones contracts and users Resources are based on templates These templates are called resource types Predefined resource types are provided for commonly used resources and you can also create your own Whenever possible use the predefined resource types See About predefined resource types on page 20 With all resources you can...

Page 30: ...ou select which resource s data class to keep If a data class exists only for the resource that is discarded the data for that data class is also discarded Associations from the resource that is to be deleted are transferred to the new resource If there is more than one of the same type of association the older association is deleted About the Resource Association Diagram The Resource Association ...

Page 31: ...Manager which displays details about the resource Each user defined item task is defined for a specific resource type and all of the resource types based on that resource type If you define an item task for the Monitor resource type the item task will be available only when you right click on a Monitor resource If you create an item task for a Software License resource type the item task will be a...

Page 32: ...resource type Includes Add Cost Item Dispose of Asset s and Retire Asset s One common action is bulk editing CMDB Functions action Assign the asset to an Owner Cost Center or Location Available actions depend on the resource type Note When you assign an owner through an item task all previous ownership associations are deleted Assignment Functions Sets the status of a resource The status of a reso...

Page 33: ...e Resource List page and select User Defined and select the name of the item task User defined item tasks let you quickly access any page accessible through a URL and pass parameters to the page based on data from selected resources For example you right click a user and select a user defined item task The task uses the URL to pass the name of the user as a parameter to a phone list Web site Each ...

Page 34: ...Using resources About reports on owned resources 34 ...

Page 35: ... tracks and manages any asset Each asset can be associated with a user department cost center and location About the computer resource type The Computer resource type provides a large amount of built in functionality for managing computer resources This resource type also integrates tightly with data provided by Altiris Inventory Solution You can enter the computer data that Inventory Solution doe...

Page 36: ...asset in the database About retiring or disposing of an asset After an asset can no longer be used in the enterprise you must deactivate it When you deactivate an asset it no longer appears in reports and is no longer considered an asset Depending on the age and usefulness of the asset and the reasons for deactivating it you can choose either retirement or disposal If an asset is broken beyond rep...

Page 37: ...ent types of contract data including the following Location of contract documents Service definitions Contract details A contract is a type of resource You can associate contracts with other resources such as a computer a printer and a monitor CMDB Solution includes predefined contracts These predefined contracts are Service Level Agreements and Contracts About datacenter type resources Datacenter...

Page 38: ...mple if you have an Exchange Server that computer provides an email service The Exchange Server itself is listed as a System resource type while email is listed as a service resource type About computer resource types The Computer resource type provides a large amount of built in functionality for managing computer resources This resource type also integrates tightly with data provided by Altiris ...

Page 39: ...access to CMDB Solution Each type of user has different access needs Setting up security properly ensures that your data is secure while permitting users to have the access they need Example A user might be a manager who needs to have access to reports in the department the user manages Another user the administrator requires permissions over everything CMDB Solution supports the following methods...

Page 40: ...d security roles on page 40 See About role based security configuration on page 40 About predefined security roles CMDB Solution includes a predefined security role named CMDB Manager This role along with others you can define make it easier to grant the appropriate rights to users If the rights and the permissions are adequate for your needs then all you need to do is assign the appropriate users...

Page 41: ...pes item tasks reports folders collections and other items Permissions let you control exactly what data is accessible by users or groups belonging to Notification Server security roles You might want to limit who can view or manage certain resource types for security reasons You can limit what resource types are viewable and manageable from the Resources tab You can set security for an individual...

Page 42: ...user running the reports has security access to See About scope based security on page 41 The two fields for enabling this feature are as follows Associated security reporting Report on Owned Resources See About reports on owned resources on page 33 About CMDB Security About security scoping for reports 42 ...

Page 43: ... data They are used to reflect your own organization s structure Organizational type resources are the essential building blocks upon which all of your other asset and contract data is based Data for these resource types should be entered as you begin creating your resource management system Careful thought and planning on how you set up organizational type resources in regard to your organization...

Page 44: ...ce type See About hierarchal resource types on page 45 Cost Center Contains department data Each department also lets you specify a manager for the department from the User resource type location and cost center Summary data includes a list of all resources and the costs that are associated with the particular department This resource type is a hierarchal resource type Department A place that is a...

Page 45: ...u can also list all of the resources that are assigned to the selected resource type and the resources of the children resource types For example a location named Headquarters has three child locations First Floor Second Floor and Third Floor If you select Headquarters you can list the resources that are assigned to Headquarters only Or you can list all of the resources that are assigned to Headqu...

Page 46: ... and on the organizational groups within each view A permission that is assigned to an organizational group applies to all resources in that group By default the permission applies to all of the child groups You cannot assign permissions directly to a particular resource Permission grants on a resource are accumulated across organizational views A security role s permissions are the union of the p...

Page 47: ...zational Hierarchy Settings page Ownership Settings page Report Scoping page Resource List page About the resource association type page Resource Data Class page About the resource association type page Resource data entry tab settings page Merge Resources page Assign Computer s Ownership to be the Primary User task page Clean Ownership task page Duplicate Computer Merge task page Duplicate User M...

Page 48: ...d Lets you select and delete a custom status value Delete Default values page This page lets you select from a list of resource types so that you may change the resources default values You can edit the resource type s default value in the Data entry default values page after you have select a resource type See Default values page Data entry for default values page on page 48 Default values page D...

Page 49: ...ame throughout the solution The Display As Settings page is used to add and delete custom display strings Table 9 2 Options on the display as settings page Description Option Displays the predefined name of the item Original String The new customized name of a field Display String Lets you choose to enable a string or enable a field change Enable Lets you edit a display string Edit Lets you add a ...

Page 50: ...y involve single or multiple users More than one user department or cost center can partly own the same asset Assets can be transferred from one owner to another Table 9 4 Options on the Ownership Settings page Description Option Lets you choose whether an asset can have multiple owners If you select Multiple With Warning you are warned when you assign ownership to an asset that already has an own...

Page 51: ... page you can access the Resource Display page which lets you specify details for a new resource or for an existing resource About the resource association type page This page lets you create and view associations between resource types Each association forms a child to parent relationship between two resource types The association adds a field to the child resource for specifying a parent resourc...

Page 52: ...ions are as follows Contract Assigned User Picker Generic Picker Hierarchy Picker for hierarchal parent resource types Hierarchy Picker Showing Children for hierarchal parent resource types List Resource Picker for Asset Software Purchase Association Control Selecting the check box with the same name as the resource association type allows a reverse resource association to be created between two r...

Page 53: ...o the child resource for specifying a parent resource For example to associate a non network printer with a computer create an association where the printer is the child resource and the computer is the parent The association adds a field to the printer resource that lets you specify the associated computer Table 9 8 Items in the resource association type page Description Item Resource association...

Page 54: ...ows a reverse resource association to be created between two resources Example Selecting the User checkbox for the Owners resource association lets you create an association from a user parent to an asset child Unless you select this box you can create associations only from a child resource to a parent resource Enable Editing From Resource data entry tab settings page The Resource Data Entry Tab ...

Page 55: ...that is kept after the merge and on which the merged resource is based Primary Resource The data for the resources to merge Data Class Name The data that is kept after the merge Keep Assign Computer s Ownership to be the Primary User task page This page assigns the primary user of a computer as the computer owner if an owner has not already been specified You can choose which computer collections ...

Page 56: ...or problematic For example when several departments or users own the same resource This page synchronizes the ownership resource association with the ownership data class If there is a conflict between the two the ownership resource association settings take precedence Table 9 12 Options on the Clean Ownership Task page Description Option Specifies a schedule to regularly run the task New Schedule...

Page 57: ...the changes that were made to the task Cancel Duplicate User Merge task page This page lets you automatically merge the users that have been duplicated in the database Table 9 14 Options on the duplicate user merge task page Description Option Duplicate users can be found through UserID and Domain or Given Name and Surname Merge key Lets you select filters of users to be excluded from the task Use...

Page 58: ...ies a schedule to regularly run the task New Schedule The task status table displays a list of scheduled task times You can customize the results with the View Group by and Search options Task status table Saves the changes that were made to the task Save changes Discards the changes that were made to the task Cancel Inventory to Asset Synchronization task page Inventory Solution is used to gather...

Page 59: ...e task New Schedule The task status table displays a list of scheduled task times You can customize the results with the View Group by and Search options Task status table Saves the changes that were made to the task Save changes Discards the changes that were made to the task Cancel Resource Merge Rule task page To merge duplicate resources for resource types other than computers and users you mu...

Page 60: ...scheduled task times You can customize the results with the View Group by and Search options Task status table Saves the changes that were made to the task Save changes Discards the changes that were made to the task Cancel Update network resource location task page CMDB Solution can be configured to automatically set the location of an asset based on the subnet that is associated with the asset U...

Page 61: ...y task page This page lets you update the organizational hierarchy groups to match the associations that are in the database Table 9 19 Options on the Update Network Resource Location task page Description Option Lets you choose the organizational hierarchies to update UpdateOrganizational Hierarchies Lets you choose whether or not to only update the resource membership Only update resource member...

Page 62: ...Using the CMDB interface Update Organizational Hierarchy task page 62 ...

Page 63: ...act type resources about 37 D data class attribute parameters about 24 data class attributes about 24 data classes about 21 data entry for default values page about 49 datacenter type resources about 37 default values page about 48 display as settings page about 49 Duplicate Computer Merge page about 56 57 H hierarchal resource types about 45 I inventory clean up about 58 inventory to asset data s...

Page 64: ...gram about 30 resource association type page about 51 53 resource association types about 26 resource data class page about 52 resource data class summary page accessing 27 resource data entry tab settings about 54 resource list item tasks about 31 resource list page about 51 resource type relationships about 26 resource types about 19 predefined 20 resources about 29 categories 30 role based secu...

Reviews: