Symantec Altiris CMDB Solution 7.0, Руководство пользователя, Страница: 40 / 64

About role-based security
In Notification Server security, a role is a group or individual with a set of
Notification Server permissions. An individual is a Windows domain or local
computer user. A group is a domain, local computer, or Notification Server defined
group of users. After you configure a role, you can add a user to that role.
Role-based security lets you set up privileges for performing tasks using Symantec
Management Console. It lets you control the creation of reports, collections, and
policies. Role-based security lets you control the changing of security settings,
the changing of incidents, and more.
We recommend that you add users who need access to CMDB Solution to a role,
and then set the privileges for the roles accordingly. To assist you, a predefined
role named CMDB Manager is provided.
See “About predefined security roles” on page 40.
See “About role-based security configuration” on page 40.
About predefined security roles
CMDB Solution includes a predefined security role named CMDB Manager. This
role, along with others you can define, make it easier to grant the appropriate
rights to users. If the rights and the permissions are adequate for your needs,
then all you need to do is assign the appropriate users to each role. The privileges
of each role can also be modified if needed.
See “About role-based security configuration” on page 40.
Table 7-1
Predefined CMDB security role
Description Role
Has the rights to all CMDB-related elements except for
configuration.
Can view, edit, and create assets and contracts (but not asset and
contract types); can create reports and policies.
Has the access to the Resources, Tasks, and Reports.
Has view, create, edit, and approve privileges.
CMDB Manager
About role-based security configuration
You can modify the privileges of security roles if you need to.
About CMDB Security
About role-based security
40