I have integrated CA APM 10.2 & CA EEM for the authentication. Now i need to give the authorization for specific agent monitoring to some groups & users. I have created one new grant manage access policy and given one name under resource.
But it is not working. I want to give authorization under SuperDomain for seperate agent monitoring.
Kindly check below the screen shot:
Please help me to understand & resolve this issue.
By not working, what do you mean? SuperDomain is meant to see everything.
Reaching out to Lynn_Williams Hiko_Davis
We are using EEM r12.51 & it is integrated with active directory. We want configuration like if one user is accessing one agent information in SuperDomain he should not be allowed to use another agent information. So user authorization will be based on agent monitoring in SuperDomain. In resource name there is only SuperDomain can i change it like: SuperDomain|Tomcat|TomcatAgent ?
The user is tied to the domain permission. While you can restrict a users rights for read/write/etc... if you have Superdomain (or any other domain for that matter) you cannot have user A see only Agent A and user B see only Agent B if both are in Superdomain.
You can however seperate it out wherein you have Domain A and Domain B. Agent A is tied to Domain A and Agent B is tied to Domain B. If User A has permissions to see Domain A but not Domain B and you make user B have permissions to see Domain B and not Domain A, then what you want to do will be achieved.
Thanks for your response, i have tried with multiple domain it is working.
What EEM release are you using? Did you run
manage Access Policy >Check Permissions
As Matt suggested, please provide more details on what functionality is not working as expected.
Please let us know what you are now considering as a next step. It sounds like either using multiple domains or submitting an idea are the only two options.
Was hoping to hear back if you were going to pursue Matt's suggestion of multiple domains or open an idea on this. Can you let us know how you are going to proceed on this?