Configuration Management Security Role: CMDB Items Tab

Global Permissions for the CMDB

Before you start

You must have Security Roles setup selected in the Admin tab of your own General Access security role before you can assign or remove permissions for any security roles.

1. Display the Configuration Management Security Roles details window, if it is not already on screen.

2. Assign the global permissions for the security role:

Disable CMDB Security	Analysts with this role have unlimited access to the CMDB, including the External Resource Searchand Federated CMDB Admin options. Select this option to effectively turning off the granular security system for access to the CMDB. All CMDB items will open in edit mode, regardless of other permissions. Leave this deselected to assign specific permissions to the role.
External Resource Search	Analysts with this role can search for CMDB items from the External Resources Search window. Analysts with this permission are restricted to a Cached Resource Search so searches can only return CMDB details that have been imported and not excluded from the Federated CMDB. This option also allows Analysts to view external resource data via the Linked Resources option.
Federated CMDB Admin This option is only enabled if External Resource Search is selected.	Analysts with this role can import CMDB Items from the External Resource Search window. They can also perform a Full Resource Searchto search for Item Details within the CMDB which have not been imported into ASM Core, access the Federated CMDB Administration windows and access and process Discrepancy Reports through the CMDB Item Details Explorer option of the same name.

Select the CMDB Items tab if it is not already uppermost.

CMDB Item Security By Type This option is only enabled if the Disable CMDB Security setting is deselected.	Use this option to set permissions for this role for selected CMDB Item Types defined in the system. When you select the option, additional fields are displayed, allowing you to specify the CMDB Item Type and assign certain permissions. CMDB Item Type Type or search for the CMDB item type. When it appears in the field, select Add to List to display it in the List browse table. View is shown as selected if CMDB Item View below the table is selected. Cascade is shown as selected if Cascade to Child Types below the table is selected. Beneath the table is a field displaying the selected CMDB type. You can change this by selecting a different CMDB Item Type in the List table.
CMDB Item Type This option is only available when CMDB Item Security By Type is selected.	Type or search for the CMDB item type. When it appears in the field, select Add to List to display it in the List browse table.
CMDB Item View	is shown as selected if CMDB Item View below the table is selected.
Cascade to Child Types	is shown as selected if Cascade to Child Types below the table is selected.
CMDB Item Advanced Search	This option appears at the top of the tab, to the right of CMDB Security by Type. It enables the Advanced Search option when searching for CMDB items. Analysts with this role can create searches using advanced search functions.
CMDB Item Bulk Update	This option appears at the top of the tab, to the right of CMDB Advanced Search. Analysts with this role can update one or several fields in several configuration items. Select it to enable the CMDB Bulk Update button on the toolbar of the Search CMDB Items search window. Deselect Disable CMDB Security to enable this option.
Cascade to Child Types	This option appears below the table if CMDB Item Security by Type is selected. Selecting this option cascades the security settings to all child types of the selected CMDB Type. If cleared, permissions must be set for each child type
CMDB Item View	Analysts with this role can search for and view CMDB Items
CMDB Item New	Analysts with this role can create new CMDB Items This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Update	Analysts with this role can update CMDB Item details. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Delete	Analysts with this role can delete CMDB Item details This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Ref Update	Analysts with this role can modify the CMDB Item’s reference information. Selecting this option also provides access to the versioning functionality. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Title Update	Analysts with this role can modify the title of CMDB Items. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Cancel Lock	Analysts with this role can cancel the lock set on CMDB Items. By default, only one Analyst can update a CMDB Item record at any one time. Selecting this option enables the CMDB Item record to be updated by two or more Analysts simultaneously. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Clone	Analysts with this role can create a copy (clone) of the selected CMDB Item. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Freeze	Analysts with this role can freeze CMDB Items This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Unfreeze	Analysts with this role can unfreeze CMDB Items This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Action by Default	Analysts with this role can open CMDB Items in edit mode directly. They do not need to use the Edit button. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Financial View	Analysts with this role can view financial information for CMDB Items on the CMDB Item Details window. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Financial Update	Analysts with this role can update financial information for CMDB Items on the CMDB Item Details window. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Link Update	Analysts with this role can create, edit and delete links between CMDB items. However, it does not give permission to override impact relationship on a link. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected, and CMDB Item Security By Type is selected
CMDB Item Override Link Impact	Analysts with this role can override the impact relationship on link types that allow impact relationships to be overridden when viewing a linked CMDB item. This is set in the CMDB Link Type window. The option must be selected for both Types in the link to allow the override. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Baseline Update	Analysts with this role can create and edit CMDB Items flagged as Baselines. It enables the Baseline checkbox on the CMDB Item Details window. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Template Update	Analysts with this role can create and edit CMDB Items flagged as Templates. It enables the Template checkbox in the CMDB Item Details window This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Attachment Download	Analysts with this role can download and view Objects that are attached to CMDB Items. Objects is a menu option on the CMDB Item Details Explorer window. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Attachment Update	Analysts with this role can update objects that are attached to CMDB Items. Objects is a menu option on the CMDB Item Details Explorer window. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Attachment Delete	Analysts with this role can delete an object that is attached to a CMDB item. CMDB Item Attachment Download must be selected and Disable CMDB Security and CMDB Security by Type deselected.
CMDB Item Stakeholders View	Analysts with this role can view stakeholders that are linked to CMDB Items This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Stakeholders Write	Analysts with this role can update details for stakeholders that are linked to CMDB Items This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Cost Center View	Analysts with this role can view Cost Centers that are linked to CMDB Items This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Cost Center Update	Analysts with this role can update Cost Centers that are linked to CMDB Items This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
	The following options are only shown for Software Product or Inventory CMDB Item Types (or sub types of these standard CMDB Item Types) :
View Transactions	Analysts with this role can search for and view asset transactions from the Inventory or Software Product Details and from the Call or Request details. It enables the Bulk Inventory option in the CMDB Item Details window for an inventory product, and Licenses in the CMDB Item Details window for software products
Order/Purchase	Analysts with this role can add orders and purchases for Software Products or Inventory items. This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
Reserve/Allocate	Analysts with this role can allocate and reserve items which are On Hand, unallocate items which are In Use, and allocate and delete items which are Reserved
Retire	Analysts with this role can retire items which are On Hand or In Use This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
Transfer	Analysts with this role can transfer items which are On Hand and Transfer Ownership of items which are In Use This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
Change Availability Status	Analysts with this role can Change Availability Status for items which are On Hand This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
My Jurisdictions	Analysts with this role can only order, purchase or transfer items using organizations and cost centers (as well as any children defined for each of these) allocated to their own jurisdictions
All Jurisdictions	Analysts with this role can order, purchase or transfer items using any active organizations and cost centers

Select to save the changes and close the window. Provide the Change Reasons if prompted to do so. Alternatively, select another tab, if appropriate.