Assigning product-level roles from the Ops Center portal

Ops Center Installation and Configuration Guide
Version
11.0.x
Audience
anonymous
Part Number
MK-99OPS001-23

Because each Ops Center product includes a unique set of roles or permissions that determine what users can do within each product UI, the portal includes a direct link to access these roles and associate them with groups.

To simplify the process of assigning roles associated with each product, the Ops Center portal includes links for each entry in the Inventory tab. The Access product-level roles link takes you directly to the product window where roles are assigned or access to resources is configured. Where applicable, defaults are pre-assigned to members of the opscenter-administrators group (local only). You can also use this link to assign product-level roles to local and AD groups.

Note: Ops Center includes a special role, opscenter-security-administrator, that gives a user or group access to the Access product-level roles link (without access to any other admin functions). See Assigning portal-level roles to Ops Center groups for details.
Ops Center Product Destination of "Access product-level role" link Default roles assigned to opscenter-administrators group
Administrator Dashboard > Security Settings StorageAdministrator, SystemAdministrator, SecurityAdministrator
Analyzer Administration > User Group Management > User Groups and Permissions Admin, Modify, StorageOps
Analyzer detail view Manage > Administration > Manage Ops Center Groups and Roles Normal, Admin
Analyzer probe The Admin role is assigned automatically; no action is necessary. Admin
Analyzer viewpoint Configuration > Users Admin
Automator The link opens the Administration tab. Select User Groups under Resources and Permissions. Admin, plus access to all service groups
Protector Dashboard > Access Control Protector Admin (assigned under ACP Association "opscenter Administrators")
  1. Log in to the Ops Center portal as sysadmin or a user with opscenter-administrators membership.
  2. From the navigation bar, click Inventory.
  3. Click the Access product-level roles link for the product.
  4. See the procedures that follow for the product you have selected.

For Administrator

  1. In the Ops Center Security Management window, enter the group name and select it.
  2. Select the permissions to be assigned and then click Submit.

For Analyzer

  1. In the Administration window, click User Groups and Permissions under User Group Management.
  2. Select the group name and then click Edit Permission Mapping.
  3. In the "Edit User Groups" section, select all permissions and then click OK.

For Analyzer detail view

Make sure that Analyzer detail view is registered with Common Services.

  1. Log in to the Ops Center portal with a user which belongs to the administrator group (for example opscenter-administrators) and then start Analyzer detail view.
  2. In the Analyzer detail view, in the application bar, click the Manage menu.
  3. In the Manage window, in the Administration section, click the Manage Ops Center Groups and Roles link.
  4. In the Manage Ops Center Groups and Roles window, select the check boxes to assign the Normal and Admin role to user groups and then click Save.

For Analyzer viewpoint

Make sure that Analyzer viewpoint is registered with Common Services.

  1. Log in to the Ops Center portal with a user which belongs to the administrator group (for example opscenter-administrators) and then start Analyzer viewpoint.
  2. Select Users from the Configuration menu.
  3. In the Role column for the login, select Admin.

For Automator

  1. In the Administration window, click User Groups under Resources and Permissions.
  2. Select the group and then click Assign under "Service Groups."
  3. Select "All Service Groups" and then click Add to move it to "Assigned Service Groups."
  4. Change the Role from Submit to Admin and then click OK.

For Protector

Instead of assigning a role to a group, you must create an association that connects a group with a profile (that has a defined role and access to resources).

  1. In the Access Control window, click Manage ACP Associations.
  2. Click the plus (+) icon.
  3. Enter a name for the association and then click Next.
  4. Select Group, and then select "opscenter" from the Space list.
  5. Click Browse and select the Group Name.
  6. Click Next.
  7. Click a profile under "Available Profiles" to add it to "Selected Profiles."
  8. Click Finish.