Ability to define an API account as Read-Only

Idea ID 1654450

Ability to define an API account as Read-Only

From a security perspective there is a need to restrict the ability of an API (REST, SOAP, JavaAPI) integration from performing write / modify operations to UCMDB Data unless specifically required.  A more granular ACL capability would be better, but Read-Write/Read-Only as a minimum. secuity control.

Tags (2)
6 Comments
Micro Focus Expert
Micro Focus Expert
Status changed to: Waiting for Votes

The idea has received an initial review to ensure adherence to our idea submission and community guidelines. More information may be needed at this stage and we expect the community to help prioritize the idea with comments and voting

Visitor.

New or Quiet Member..

Micro Focus Expert
Micro Focus Expert
Status changed to: Under Consideration

This idea received enough votes and comments from the community and been reviewed by Micro Focus for strategic fit. These ideas are continually monitored and considered for prioritization in our development planning.

Super Contributor.. Super Contributor..
Super Contributor..

We need this to work for 10.33 and up.

Micro Focus Expert
Micro Focus Expert

Have you checked to determine if the DataConsumer permission would work for this request?

https://docs.microfocus.com/itom/Universal_CMDB:11.0/admin/RolesMan_r_Permissions_summary

If you assign this role to the API user, they should have read-only permissions for the CIs and resources.

Micro Focus Expert
Micro Focus Expert
Status changed to: Archived

We're dealing with this problem as a defect and not an ER - it has been moved to the support team with assistance from R&D for a local hotfix 

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.