# Configuration Management Security Role: Locations Tab

{% hint style="info" %}
Before you start

You must have **Security Roles setup** selected in the Admin tab of your own **General Access security role** before you can assign or remove permissions for any security roles.
{% endhint %}

1. Display the Configuration Management Security Roles details window, if it is not already on screen.
2. Assign the global permissions for the security role:

<table data-header-hidden><thead><tr><th width="272"></th><th></th></tr></thead><tbody><tr><td><strong>Disable CMDB Security</strong></td><td>Analysts with this role have unlimited access to the CMDB, including the <strong>External Resource Search</strong> and <strong>Federated CMDB Admin</strong> options. Select this option to effectively turning off the granular security system for access to the CMDB. All CMDB items will open in edit mode, regardless of other permissions. Leave this deselected to assign specific permissions to the role.</td></tr><tr><td><strong>External Resource Search</strong></td><td>Analysts with this role can search for CMDB items from the External Resources Searchwindow. Analysts with this permission are restricted to a <strong>Cached Resource Search</strong> so searches can only return CMDB details that have been imported and not excluded from the Federated CMDB. This option also allows Analysts to view external resource data via the Linked Resources option.</td></tr><tr><td><strong>Federated CMDB Admin</strong></td><td><p>Analysts with this role can import CMDB Items from the External Resource Search window. They can also perform a <strong>Full Resource Search</strong> to search for Item Details within the CMDB which have not been imported into ASM Core, access the <strong>Federated CMDB Administration</strong> windows and access and process Discrepancy Reports through the CMDB Item Details Explorer option of the same name. </p><p>This option is only enabled if <strong>External Resource Search</strong> is selected.</p></td></tr></tbody></table>

3\.  Select the **Locations** Tab

<details>

<summary>Location View</summary>

When **Location View** is selected, the following options are enabled:

**Location New** - Analysts with this role can create locations

**Location Update** - Analysts with this role can update locations

**Location Delete** - Analysts with this role can delete Locations

**Location Title Update** - Analysts with this role can update the name of a given location

**Location Object Download** - Analysts with this role can view and download objects and attachments that have been uploaded to the location record.

**Location View Secure Attachments** - When enabled, analysts with this role can view attachments using the secure PDF Viewer. &#x20;

**Location Stakeholder View** - Allows Analysts to view linked stakeholders for each location.  These might be the Points of Contact, for example, for a given location.

**Location Advanced Search** - this enabled advance and detailed searching on the Location search screen.

</details>

<details>

<summary>Location Update</summary>

When Location Update is selected, analysts with this role can:

* **Location Cancel Lock** - Selecting this option cancels the lock set on Locations. By default, only one Analyst can update a Location record at any one time. Selecting this option disables this function and enables the Location record to be updated by two or more Analysts simultaneously.
* **Location Action by Default** - Analysts with this role can open location details in edit mode directly; they do not need to use the **Edit** button.

</details>

<details>

<summary>Location Object Download</summary>

When **Location Object Download** is selected, additional options appear for:

* **Location Object Update** - If Location Object update is selected, then the following are enabled:
  * [ ] **Location Object Cancel** - Analysts with this role can cancel and ‘override’ a checkout of an object that is attached to an organization and restore it to its last checked-in state.  **Location Object Version Control** must be selected in the **CMDB Settings** and **Location** **Object Update** in this role must be selected to enable this option.
  * [ ] **Location Object Delete**&#x20;

</details>

<details>

<summary>Other Options</summary>

**Location Stakeholders View** - Analysts with this role can view stakeholders that are linked to locations.

**Location Stakeholders Write** - Analysts with this role can update details and link stakeholders to locations.

</details>