Highlighted
Visitor.
370 views

How to restrict access to a subset of CIs

Hi Experts,

We are using UCMDB 11. Currently we have around 5 million CIs spread across 5 different CI types. Users have access to all these CIs.

Now we want to add another user group ("GroupB") that can have have access only to a subset of CIs based on a value of "AttributeX", e.g users belonging to "GroupB" can see/search only CI with "AttributeX=true". It is estimated that it will be approximately 80% (4 million) of all CIs with "AttributeX set to true".

How this can be achieved?

We are using UCMDB GUI. At this stage there is no plans to use UCMDB Browser.

Best regards

3 Replies
Highlighted
Acclaimed Contributor.
Acclaimed Contributor.

Re: How to restrict access to a subset of CIs

The  way to do it is to use tenants. in UCMDB there are two attributes which control the tenants - Owner Tenant and Consumer tenants. You can assign the owner/consumer tenants by enrichment (big caution  -the enrichment use is very resource intensive and better to use it only once to setup the system) and then you can control which tenant to be seen by assigning it on the User/Group settings + adding the tenant in Consumer Tenants stringlist.

Cheers,

Petko Popadiyski

Freelance Microfocus CMS UCMDB Consulting

Likes are appreciated!
Highlighted
Visitor.

Re: How to restrict access to a subset of CIs

Thanks Petko,

Our UCMDB is in a single tenant mode. I understood it's not possible to enable multi-tenancy - UCMDB has to be reinstalled? This is something we want to avoid if possible.

Just wondering if there are any alternatives?.

Best Regards

 

0 Likes
Highlighted
Acclaimed Contributor.
Acclaimed Contributor.

Re: How to restrict access to a subset of CIs

If your UCMDB is single tenant then only a reinstall will bring the multi-tenancy option.

Currently you can user CLA (Ci Level Access) through user roles. I would not recommend it.

Kind regards,
Bogdan Mureșan

EMEA Technical Success
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.