System Security (Permissions)

Description

System Security dictates system-wide permissions that can be configured for Users or User Groups. In order to secure Automate Enterprise and its resources, administrators can determine permissions that users or groups will have on the system. You can secure the system by regulating operations that users and/or groups can perform, such as deploying agents, adding licenses, viewing reports or setting default object properties. For example, to secure server settings, you can grant one user permission to view the settings, grant another user permission to edit those settings and deny permissions to view or edit server settings for all other users. System permissions are globally set for each user or group.

To access System Security, from the Server Management Console (SMC), select Options > Server Settings > System Security.

Related Topics

To Set or Modify System Permissions

  1. From the System Security page, do one of the following:

    • Select the desired user or group from the Available Group/User Name (top left) pane and click Add to add it to the Selected Group/User Name (top right) pane.

OR

    • Double-click a user or group from the Available Group/User Name pane which will add it to the Selected Group/User Name pane.

  1. Select the user or group from the Selected Group/User Name pane and for each permission level in the Permissions (bottom) pane, specify whether that user/group should be allowed or denied access to the resource or action.

  1. Click OK to save.

NOTE: If two or more sets of permissions conflict, the set of permissions with least privilege is applied. For example, if an individual user that is normally allowed permission to deploy agents is added to a user group that is denied permission to deploy agents, that user will no longer be able to deploy agents based on the rule that permissions with the least privilege is applied.

Parameters

The table below describes available system permissions that a user or group can be allowed or denied access to.

Permission Description
Full Control Allow or deny full control on the system. Toggling Allow gives rights to all permission levels listed below. Toggling Deny refuses rights to all permission levels listed below.
Deploy Agents Allow or deny permission to deploy agents onto remote computers. For more details, see Agent Deployment Wizard.
View Reports Allow or deny permission to view reports, including charts and tables. For more details, see Reports.
View Preferences Allow or deny permission to view preferences which affect an assortment of visual and operational characteristics in SMC. For more details, see Preferences.
Edit Preferences Allow or deny permission to edit preferences. For more details, see Preferences.
View Server Settings Allow or deny permission to view server level settings, such as Data Store, Load Management, SQL Connections and more. For more details, see Server Settings.
Edit Server Settings Allow or deny permission to edit server level  settings. For more details, see Server Settings.
View Default Properties Allow or deny permission to view default properties which affect the behavior of individual workflows, tasks, agents, and other objects. For more details, see Default Object Properties.
Edit Default Properties Allow or deny permission to edit default properties. For more details, see Default Object Properties.
View Licensing Allow or deny permission to view product license information. For more details, see Licensing.  
Edit Licensing Allow or deny permission to edit product license information. For more details, see Licensing.  
Toggle Triggering Allow or deny permission to turn global triggering on or off by way of the SMC's Status Bar. For more details, see Status Bar.
View Dashboard Allow or deny permission to view the dashboard panel of SMC. For more details, see Dashboard.
Edit Dashboard Allow or deny permission to edit the dashboard panel of SMC. For more details, see Dashboard.
View Calendar Allow or deny permission to view the calendar of previous and future events. For more details, see Calendar.
View Revision Management Allow or deny permission to view the Revision Management information. For more details, see Revision Management.
Edit Revision Management Allow or deny permission to edit the Revision Management information. For more details, see Revision Management.
View Recycle Bin Allow or deny permission to view the Recycle Bin information. For more details, see Recycle Bin.
View Credentials Allow or deny permission to view credential variables. For more details, see Credentials.
Edit Credentials Allow or deny permission to edit credential variables. For more details, see Credentials.
View Credentials Connections Allow or deny permission to view connections to third-party credential sources. For more details, see Credentials Connections.
Edit Credentials Connections Allow or deny permission to edit connections to third-party credential sources. For more details, see Credentials Connections.