Friday, June 1, 2012

Control-M/EM GUI Authorizations

To perform any action in Control-M we need Authorization/Permission. This will be setup using Authorizations window in Control-M/EM GUI. Using this we can create, modify or Delete user-id's and their privileges. This is the window Schedulers or Admin will use to create a User-Id or Reset Password or modifying privileges.. etc.

To access the Authorizations window Follow the below steps:
  1. Log on to CONTROL-M/EM GUI or CONTROL-M/Desktop.
  2.  Choose Tools => Authorizations. The Users tab is displayed.
The Authorization window has separate panels for users and groups. The Users panel enables you to add, modify, copy, or delete a user whose authorizations can be configured. The Groups panel enables you to add, modify, copy, or delete a group whose authorizations apply to members of the group.

Actions that are permitted or denied for each access level are described below. 
  1. None - Denies access to the component.  
  2. Browse - Can view and refresh the component.  
  3. Update - Permits adding and modifying CONTROL-M information.  
  4. Full - Permits adding, modifying, and deleting CONTROL-M information.  
  5. Default - [Valid for user authorizations. Not valid for group authorizations.] Inherits the permissions from the group to which the user belongs. Use of this is, We can create a Group with list of Privileges
The panel will look like below.


Authorizations window – Users tab fields
  • Filter: Select this check box to enable the User Name filter.
  • User Name text box: Specify a user name or pattern (for example, adm*). Click Apply to apply the filter. Click Clear to erase the contents of the text box.
  • Name: CONTROL-M/EM logon name of the user to whom the authorization refers. Names listed satisfy the requirements of the filter, if any.
  • Full Name: Full name of the user.
  • Description: Description of the user.

Authorizations window – Groups tab fields
  • Filter: Select this check box to enable the Group Name filter.
  • Group Name text box: Specify a group name or pattern (for example, adm*). Click Apply to apply the filter. Click Clear to erase the contents of the text box.
  • Name Group name: Groups listed satisfy the filter requirements, if any.
  • Description: Description of the group.

User Properties Window:


Authorizations window – User Properties fields
  • General: Provides logon data about users (or lists members of a group).
  • Member Of: [User Authorizations window] Matches users with groups.
  • Jobs: Jobs a user (or member) can access and actions he can perform.
  • Privileges
    • Whether the CONTROL-M Configuration Manager can be accessed and used, Alerts and Archived Viewpoints can be viewed, and the user (or member) can use the Command Line Interface (cli).
    • Actions that can be performed on Collections, Hierarchies, Filters, ViewPoints, and Authorization screens.
  • Scheduling Tables: Scheduling tables a user (or member) can access in CONTROL-M/Desktop, authorization levels for the tables, and whether jobs or tables can be ordered or forced.
  • Prerequisite Conditions: Prerequisite conditions that a user (or member) can access.
  • Control Resources: Control resources that a user (or member) can access.
  • Quantitative Resources: Quantitative resources that a user (or member) can access.
  • Global Conditions: Global conditions that a user (or member) can access.
  • Calendars: Calendars that a user (or member) can access.
  • Owners: Jobs in scheduling tables that a user can access.

7 comments:

ramz blog said...

Hi Mahi,

Thank you for sharing valuable information.It would be great if you could update control-m desktop and configuration manager as well.

Mahi said...

Sure.. will do that

Unknown said...

Wondering if one could limit the access to updating or writing tables. But able to Order them

Unknown said...

Found this...
Action_OrderForce_AuthLevel

Set to BROWSE_ACCESS

Unknown said...

UPDATE REMAINING

Unknown said...

I able to add user id with 8+ char but if I try to login - it throwing error not authorized... Any constrain in character?

Unknown said...

I able to add user id with 8+ char but if I try to login - it throwing error not authorized... Any constrain in character?

Post a Comment

Twitter Delicious Facebook Digg Stumbleupon Favorites More

 
Design by Awesome Deals | Bloggerized by Mahendra - 24x7FunOnline