Creating and editing roles

Use roles to assign permissions to users who are members of a particular group.

1. From the Netcool/OMNIbus Administrator window, select the User menu button.
2. Click Roles. The Roles pane opens.
3. To add a role, click Add Role in the toolbar. The Role Details window opens.
4. To edit a role, select the role to edit and then click Edit Role in the toolbar. The Role Details window opens.
5. Define a new role as follows:

   Role Name

   Type a unique name for the role. If you are editing a role, you cannot change the name.

   Tip: When creating ObjectServer objects, their names must begin with an uppercase or lowercase letter, followed by uppercase or lowercase letters, numbers, or underscore (_) characters, up to 40 characters in length. User, group, and role names can be any text string up to 64 characters in length and can include spaces. Names of ObjectServer objects are case-sensitive.

   Role ID

   Specify a unique numerical identifier for this role. If you are editing a role, you cannot change the role ID.

6. From the Details tab, enter a meaningful description for the role or update the description.
7. From the Permissions tab, grant permissions to the role or revoke permissions, as follows:

   Add permission

   Click this button to grant permissions to the role. The Permission Objects window opens. Complete this window as follows:

   Object Type

   Select the type of object to which you want to grant or revoke permissions.

   Available Objects

   The contents of this list are dependent on the object type selected. The Available Objects list displays the objects for which permissions have not been granted. To grant permissions to one or more objects, use the arrow keys to move the objects to the Selected Objects list.

   To move all objects to the Selected Objects list, click >>. To move a single object or multiple objects to the Selected Objects list, select each object and then click >. You can use the SHIFT key for consecutive selections, or the CTRL key for non-consecutive selections.

   Selected Objects

   This list displays the objects for which permissions have been granted. To revoke permissions for one or more objects, use the arrow keys to move the objects to the Available Objects list.

   To move all objects to the Available Objects list, click <<. To move a single object or multiple objects to the Available Objects list, select each object and then click <. You can use the SHIFT key for consecutive selections, or the CTRL key for non-consecutive selections.

   Tip: You can add multiple object permissions by selecting each required object type in turn from the Object Type list, and then adding the object to the Selected Objects list.

   OK

   Click this button to save the permissions configured for the role, and close the Permission Objects window.

   Cancel

   Click this button to close the window without saving your changes.

   When you return to the Permissions tab on the Role Details window, the permissions tree is updated with your changes. The parent node shows the main object, and the nested child nodes show associated subobjects. You can expand these subobjects to view the associated SQL permissions; for example ALTER, DELETE, and DROP. Select the check box associated with the SQL permission to assign that permission to the role. Clear the check box to revoke the permission.

   Delete permission

   From the permissions tree, select a parent or child node for which you want to revoke permissions, and then click this button. The node is deleted from the tree.

8. Save or cancel your changes as follows:

   OK

   Click this button to save the role details and close the window. New roles are added to the Roles pane.

   Cancel

   Click this button to close the window without saving your changes.