Create a Profile
our customer requires a user with the following grants:
The user can:
1. see all properties of all CIT. Can't modify properties.
2. create link to/from node (only node).
I have tried to do this but:
1. to create link for/to node I have to select action "relate to CI" for the CI type node. BUT...
I need also to activate general action "Data Update".
Without "Data Update", "relate to CI" is not activated.
2. to see properties of all CI type, I have to select action "properties" for CI type managedObject. BUT...
As I have activated before the general action "Data Update", the properties become editable for all CI types children of managedObject.
We don't want that user can modify properties.
How can we implement this role?
We are using uCMDB 10.21
Re: Create a Profile
Unfortunately the UCMDB UI does not have such a functionality. Setting permission on a such granular level is not possible in UCMDB UI.
However there is the option to use UCMDB Browser with CI Level Authorization permissions(CLA). It is possible to set only view permissions on all CIs. Also by creating an service template Node->Node one can add only relationships since there is no limitation on relationship.
I will test this scenario as I am not sure what and if additional permissions are required. I will update with findings as soon as possible.