This section explains how to use the Set Permissions window to specify and remove users' access rights to individual projects (update right, change right, operation right and reference right).
Note
Only the system administrators (Note) can set the access rights for projects. However, if the Extended User Management function [UNIX] has been enabled, only Operation Manager users with administrator privileges can use the Set Permissions window.
If access rights have not been set up, only the project owner and system administrators (Note) can access the project. However, if the Extended User Management function [UNIX] has been enabled, only Operation Manager users with administrator privileges can access the project.
Even if a user (for whom access rights to the project have been set up) is removed from the operating system, that user's access rights to the project will not be deleted. If necessary, use the Set Permissions window to delete the access rights for the user.
Note: Users belonging to the Administrators group [Windows], or superusers [UNIX]
Setting up access permissions
Procedure
Open the Set Permissions window
Select a project in Job Selection of the Systemwalker Operation Manager window. Next, select Access Rights from the Security menu. The Set Permissions window will be displayed.
Set up access permissions
In the Set Permissions window, select a user or group that will be able to access the project, and then specify an access right (update right, change right, operation right or reference right).
Figure 4.2 Set Permissions window
The content displayed here varies depending on the destination server.
If the destination server is a Windows system, select a domain or computer for a registered group or user ID displayed in the User ID/Group list.
If the destination server is a UNIX system, the host name for the destination server will be displayed.
The content displayed here varies depending on the destination server.
If the destination server is a Windows system, this area will display a list of the groups and user IDs that have been registered in the domain or computer selected in the NetBios computer name field. Use this list to select a user or group for which an access right will be specified.
If the destination server is a UNIX system, this area will display a list of the user IDs and groups that have been registered on the computer. Use this list to select a user for which an access right will be specified.
Use this item to select which access right to set for the selected user or group.
Update Right:
Users with update rights can execute operations with all the privileges associated with change rights, operation rights and reference rights.
Change Right:
Users with change rights can register job nets and groups in projects. This access right includes reference rights. However, users with only change rights cannot perform operations such as starting and canceling job nets and groups.
Operation Right:
Users with operation rights can perform operations such as starting and canceling job nets and groups. This access right includes reference rights. However, users with operation rights cannot register job nets or groups in projects.
Reference Right:
Users with reference rights can monitor the execution status of job nets and groups, and look up the execution results.
Information
Refer to "Usage Restrictions Based on Access Rights" in the Systemwalker Operation Manager Installation Guide for details on the Systemwalker Operation Manager operations that can be performed by users with different access rights.
This button is used to set the selected access right for the group or user ID that has been selected in the User ID/Group list field.
This area displays a list of the user IDs and groups whose access rights have already been specified, as well as their access rights.
Information
To use change rights, connect from a client running Systemwalker Operation Manager V13.2.0 or later.
Note the following points when a client running Systemwalker Operation Manager V13.1.0 is connected to a server running Systemwalker Operation Manager V13.2.0, V13.3.0 or V13.3.1:
Projects for which change rights have been set cannot be displayed if the connection is made by an ordinary user. To view these projects, connect to the server as a user with access rights.
Change Right does not appear in the Access Rights combo box in the Set Permissions window if a connection is made by a system administrator.
Deleting access rights
Procedure
In the Set Permissions window, select the user or group whose access right is to be deleted from the Access account list, and then click the Delete button.
