Some doubts about Role and Users Creation

[Anon Anon]

Hi all,

I'm trying to create roles and assigned it for some users, the role created is for a kind of user that only can see devices assigned to a specific group and dashboards.

But this user can create/delete groups and rules

In attach you'll find one image that describes my situation

Any doubt, please let me know

Greetings,

Carlos Brito

[Stuart Weenig]

What's your question? Do you not want that user to be able to create groups? The 'My Groups' feature can be disabled on a per user basis on step 2 of the user dialog box.

[Anon Anon]

Hi Stuart

Thank you for reply me

What i was trying to say is how can i disable the buttons "Add Group" and "Remove Group" because we need leave enabled the option "Enable my custom groups"

Is it possible?

Any doubt please let me know

Thank you

Carlos

[Stuart Weenig]

Ok, so just to make sure: You want to grant the user to add or remove their own custom groups but not add or remove groups in the main group tree. This should be possible out of the box. Have you tried creating a user with the my groups option enabled but not giving them a role with administrative access? Their role should determine their ability to modify the global group tree. They will have the add/remove custom groups though. There's no point in having my groups if they can't add/remove.

[Anon Anon]

Hi Stuart,

Thank you for reply me once more.

I need to create a user only with visualization rights, not giving administrative access on the main group tree or custom group.

I've assigned operator rights for them, but i realized that the button for add or remove groups or rules are still enabled, I hear by a friend that is not possible on Performance Center, is it?

Many thanks in advance

Carlos Brito

[Stuart Weenig]

Yep, so give the user access to /all groups and the option for 'my groups'. Then in that user's role, don't give them administrative access. They should have the add/remove groups but they will only be able to add/remove within their own groups.

If you want the user to have their own 'my groups' but not be able to edit them, don't use the 'my groups' feature. Create a branch of the tree just for that user and grant him only access to that branch of the tree.

What portion of the tree he can see is dictated by the user setting. Whether or not he can modify the portion of the tree he sees is dependent on his role. Make sense?

[Bob Wilcox]

This was great information, I have a groups of users that need to build their own groups, but other members need to be able to use the same groups.

Users from group A need to see the report on devices in groups built by group A, users in group B be need to report on devices built by group B,
Users in group C need to report on devices in groups built by group A or B.

Trying to accomplish this without out making group A and B users administrators.

From: CA Infrastructure Management Global User Community (eHealth/Spectrum/NetQoS) [mailto:[e-mail]]
Sent: Wednesday, October 02, 2013 12:39 PM
To: [e-mail]
Subject: [.CA Performance Center] RE: Some doubts about Role and Users Creation

Yep, so give the user access to /all groups and the option for 'my groups'. Then in that user's role, don't give them administrative access. They should have the add/remove groups but they will only be able to add/remove within their own groups.

If you want the user to have their own 'my groups' but not be able to edit them, don't use the 'my groups' feature. Create a branch of the tree just for that user and grant him only access to that branch of the tree.

What portion of the tree he can see is dictated by the user setting. Whether or not he can modify the portion of the tree he sees is dependent on his role. Make sense?
Posted by:Stuart_Weenig
--
CA Communities Message Boards
101892993
[e-mail]<mailto:[e-mail]>
https://communities.ca. com

[Stuart Weenig]

For a user to create groups, they have to either be an admin or have the 'my groups' option enabled. if they're an admin, others can see the groups. if they use 'my groups' only they can see it.

I don't know of any way to do what you're asking for. Good idea though, submit as a feature request.

[Anon Anon]

Hi,

Thank you Stuart for your information, it was very useful

Greetings

Carlos