User DB

[Pushpa790356]

Hi Team,

 

Where is the user DB (for profiling) is kept in SOI set up after authenticating via AD ?

Kindly help.

 

Regards,

Pushpa

[Michael Boehm]

Hi Pushpa,

can you please explain what you are looking for.

All user administration in SOI is done in the Admin tab of the OneClick console.

Users have to be assigned to groups, and access is provided on group-level.

How to Configure Role-Based Security - CA Service Operations Insight - 4.2 - CA Technologies Documentation 

 

MichaelBoehm

[Brahmaiah Addepalli]

Hello Pushpa,

 

Apologies, but didn’t understand your query.

Could you please elaborate and provide a screenshot that explains the query?

 

Regards

Brahma

[Pushpa790356]

Hi Brahma/Michael,

 

Thanks for the response.

 

I just wanted to know that when we integtrate EEM with AD, then where the  users details/profile saved?

 

Regards,

Pushpa

[Michael Boehm]

Hi Pushpa,

every user which is added to a group in SOI is stored in the local DB.

It does not matter where the user is coming from - EEM or LDAP (via EEM).

User details (such as email, name, ....) are solely stored in AD.  SOI only keeps a reference to the user for authentication.

Access within SOI (Services, Alert Queues, Preferences) is controlled within SOI.

 

Does this answer your question?

 

MichaelBoehm

[Brahmaiah Addepalli]

Hi Pushpa,

 

EEM gets user details from AD, then you need to add users manually in SOI Console to respective groups like Administrator, Operator etc.

So, EEM maintains user details and SOI requests EEM to authenticate users.

 

Thanks

Brahma

[Michael Boehm]

Hi Pushpa,

 

following are some more details:

When CA EEM is linked via LDAP to AD, all the details of users (full name, location, email, tel number, ....) which are defined in AD are also visible in CA EEM.  But this is solely a real time link to AD - none of these users is created in CA EEM.

You can see these users and details as "Global Users", but you cannot modify, add, delete anything in CA EEM - it is a link only to AD.

When you add a user in CA SOI to a group, an "Application User" is created in CA EEM.  This is fully editable, e.g. you can perform modifications directly in CA EEM, but they are only in the context of SOI (group membership).  There are no user-details (email, ...) stored with this user.  All that information is linked as explained above as "Global User Details" directly from AD.

The information kept in the CA SOI Database (tables user*) is only a link to the CA EEM user; no further details about the user is directly stored in the CA SOI DB.

The validation of userid/password is forwarded from CA EEM to AD; CA EEM does not perform this validation.  This also means, if the link between CA EEM and AD is down, the user will not be able to logon.

 

I hope this answers your question.

 

MichaelBoehm