Configuration Management Security Role: CMDB Items Tab
Global Permissions for the CMDB
Display the Configuration Management Security Roles details window, if it is not already on screen.
Assign the global permissions for the security role:
Disable CMDB Security
Analysts with this role have unlimited access to the CMDB, including the External Resource Searchand Federated CMDB Admin options. Select this option to effectively turning off the granular security system for access to the CMDB. All CMDB items will open in edit mode, regardless of other permissions. Leave this deselected to assign specific permissions to the role.
External Resource Search
Analysts with this role can search for CMDB items from the External Resources Search window. Analysts with this permission are restricted to a Cached Resource Search so searches can only return CMDB details that have been imported and not excluded from the Federated CMDB. This option also allows Analysts to view external resource data via the Linked Resources option.
Federated CMDB Admin
This option is only enabled if External Resource Search is selected.
Analysts with this role can import CMDB Items from the External Resource Search window. They can also perform a Full Resource Searchto search for Item Details within the CMDB which have not been imported into ASM Core, access the Federated CMDB Administration windows and access and process Discrepancy Reports through the CMDB Item Details Explorer option of the same name.
Select the CMDB Items tab if it is not already uppermost.
CMDB Item Security By Type
This option is only enabled if the Disable CMDB Security setting is deselected.
Use this option to set permissions for this role for selected CMDB Item Types defined in the system.
When you select the option, additional fields are displayed, allowing you to specify the CMDB Item Type and assign certain permissions.
CMDB Item Type
Type or search for the CMDB item type. When it appears in the field, select Add to List to display it in the List browse table.
View
is shown as selected if CMDB Item View below the table is selected.
Cascade
is shown as selected if Cascade to Child Types below the table is selected.
Beneath the table is a field displaying the selected CMDB type. You can change this by selecting a different CMDB Item Type in the List table.
CMDB Item Type
This option is only available when CMDB Item Security By Type is selected.
Type or search for the CMDB item type. When it appears in the field, select Add to List to display it in the List browse table.
CMDB Item View
is shown as selected if CMDB Item View below the table is selected.
Cascade to Child Types
is shown as selected if Cascade to Child Types below the table is selected.
CMDB Item Advanced Search
This option appears at the top of the tab, to the right of CMDB Security by Type.
It enables the Advanced Search option when searching for CMDB items. Analysts with this role can create searches using advanced search functions.
CMDB Item Bulk Update
This option appears at the top of the tab, to the right of CMDB Advanced Search. Analysts with this role can update one or several fields in several configuration items. Select it to enable the CMDB Bulk Update button on the toolbar of the Search CMDB Items search window.
Deselect Disable CMDB Security to enable this option.
Cascade to Child Types
This option appears below the table if CMDB Item Security by Type is selected. Selecting this option cascades the security settings to all child types of the selected CMDB Type. If cleared, permissions must be set for each child type
CMDB Item View
Analysts with this role can search for and view CMDB Items
CMDB Item New
Analysts with this role can create new CMDB Items
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Update
Analysts with this role can update CMDB Item details.
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Delete
Analysts with this role can delete CMDB Item details
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Ref Update
Analysts with this role can modify the CMDB Item’s reference information. Selecting this option also provides access to the versioning functionality.
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Title Update
Analysts with this role can modify the title of CMDB Items.
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Cancel Lock
Analysts with this role can cancel the lock set on CMDB Items. By default, only one Analyst can update a CMDB Item record at any one time. Selecting this option enables the CMDB Item record to be updated by two or more Analysts simultaneously.
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Clone
Analysts with this role can create a copy (clone) of the selected CMDB Item.
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Freeze
Analysts with this role can freeze CMDB Items
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Unfreeze
Analysts with this role can unfreeze CMDB Items
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Action by Default
Analysts with this role can open CMDB Items in edit mode directly. They do not need to use the Edit button.
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Financial View
Analysts with this role can view financial information for CMDB Items on the CMDB Item Details window.
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Financial Update
Analysts with this role can update financial information for CMDB Items on the CMDB Item Details window.
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Link Update
Analysts with this role can create, edit and delete links between CMDB items. However, it does not give permission to override impact relationship on a link.
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected, and CMDB Item Security By Type is selected
CMDB Item Override Link Impact
Analysts with this role can override the impact relationship on link types that allow impact relationships to be overridden when viewing a linked CMDB item. This is set in the CMDB Link Type window.
The option must be selected for both Types in the link to allow the override.
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Baseline Update
Analysts with this role can create and edit CMDB Items flagged as Baselines. It enables the Baseline checkbox on the CMDB Item Details window.
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Template Update
Analysts with this role can create and edit CMDB Items flagged as Templates. It enables the Template checkbox in the CMDB Item Details window
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Attachment Download
Analysts with this role can download and view Objects that are attached to CMDB Items.
Objects is a menu option on the CMDB Item Details Explorer window.
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Attachment Update
Analysts with this role can update objects that are attached to CMDB Items.
Objects is a menu option on the CMDB Item Details Explorer window.
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Attachment Delete
Analysts with this role can delete an object that is attached to a CMDB item. CMDB Item Attachment Download must be selected and Disable CMDB Security and CMDB Security by Type deselected.
CMDB Item Stakeholders View
Analysts with this role can view stakeholders that are linked to CMDB Items
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Stakeholders Write
Analysts with this role can update details for stakeholders that are linked to CMDB Items
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Cost Center View
Analysts with this role can view Cost Centers that are linked to CMDB Items
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
CMDB Item Cost Center Update
Analysts with this role can update Cost Centers that are linked to CMDB Items
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
The following options are only shown for Software Product or Inventory CMDB Item Types (or sub types of these standard CMDB Item Types) :
View Transactions
Analysts with this role can search for and view asset transactions from the Inventory or Software Product Details and from the Call or Request details. It enables the Bulk Inventory option in the CMDB Item Details window for an inventory product, and Licenses in the CMDB Item Details window for software products
Order/Purchase
Analysts with this role can add orders and purchases for Software Products or Inventory items.
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
Reserve/Allocate
Analysts with this role can allocate and reserve items which are On Hand, unallocate items which are In Use, and allocate and delete items which are Reserved
Retire
Analysts with this role can retire items which are On Hand or In Use
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
Transfer
Analysts with this role can transfer items which are On Hand and Transfer Ownership of items which are In Use
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
Change Availability Status
Analysts with this role can Change Availability Status for items which are On Hand
This option is only enabled if Disable CMDB Security and CMDB Security by Type are deselected.
My Jurisdictions
Analysts with this role can only order, purchase or transfer items using organizations and cost centers (as well as any children defined for each of these) allocated to their own jurisdictions
All Jurisdictions
Analysts with this role can order, purchase or transfer items using any active organizations and cost centers
