IBM Tivoli Netcool/Proviso 4.4.3 IBM Tivoli Netcool/Proviso 4.4.3 Controlling access to DataMart tools This IBM Education Assistant module demonstrates adding users and groups to Tivoli Netcool/Proviso 4.4.3 DataMart. Objectives Objectives Upon completion of this module, you should be able to: Describe how to use the Users Configuration module Define the use of group permissions to restrict user access to DataMart tools Upon completion of this module, you should be able to: Describe how to use the Users Configuration module Define the use of group permissions to restrict user access to DataMart tools Users configuration tool Users configuration tool The Netcool/Proviso administrator can use the Users Configuration tool to control access to Netcool/Proviso DataMart tools. With the Users Configuration tool the Netcool/Proviso administrator can control: Which users can launch the DataMart tools Which users have read-only access to the DataMart tools Which users have full access to the DataMart tools Specific groups of users need access to some but not all of the DataMart GUI tool modules. You can construct groups to permit access to the modules that a group needs and to restrict access to the modules that a group does not need. Adding a user Adding a user After you run the Users Configuration tool, you can add, modify, or delete access to the DataMart tools for groups and users. In this example, you are adding a user. Two users currently exist by default, the root user and the user created at installation. In this example, the name of the user is pvuser. Click the add icon to add a user. Selecting a user to add Selecting a user to add A user must have a system login on the DataMart server before you can add that user to the DataMart. In this example you see a list of UNIX® users in the drop-down menu of the New User window. Add user, add description, and associate group to user Add user, add description, and associate group to user After you select the user to add from the menu, type a description for the user in the Full name field. Make sure the group to which you are adding the user exists before you add the user to that group. Select a group to associate with the user. A user can belong to multiple groups, but that decision can affect the permissions available to the user. In the example you are adding the user to the reports group. This group was created for Netcool/Proviso report developers on this installation. The group exists, but you have not granted the user permissions to access DataMart tools. Click OK to accept new user Click OK to accept new user After you add the user to the group, click OK. Modifying a group Modifying a group You can add or modify groups. For example, to modify the reports group, open the Groups tab and highlight the reports group. Click the edit icon to modify the group. Editing group permissions Editing group permissions You can also edit the Group name, Description, user membership, and group permissions. Click Permissions. Assigning read and write permissions Assigning read and write permissions You can assign read and write permissions to the group for individual DataMart tool modules. You base these permissions on the needs of the group. When you assign read permission, the users can use the module to view information but not to modify information. When you assign write permission, the users of the group can use all of the functions associated with the module. When you assign the write permission you automatically assign the read permission. Using the scroll bar to assign permissions Using the scroll bar to assign permissions Use the scroll bar to assign permissions to the individual modules. Notice that no permissions are granted for the Database Information module. After you assign permissions for the group click OK. Viewing the user permissions Viewing the user permissions To view the permissions assigned to the user, highlight the user name and click the edit icon. Module permissions Module permissions The user has read permission for the Users Configuration module. Impact of permissions Impact of permissions When the DataMart GUI tool runs, the user can only see the modules for which you granted the user permission. In this example you did not grant read or write permissions to the Database Information module. When the user opens the Monitor tab, the Database Information icon shows the module to be unavailable. In addition, if the user attempts to launch the module directly, an alert message is displayed telling the user that permission to run the module is unavailable. Users configuration read-only permissions Users configuration read-only permissions When you specify read-only permissions for a module, the user can open the module. In this example the user has read permissions for the Users Configuration module. Add and edit functionality removed Add and edit functionality removed If the user has read-only permissions on the User Configuration Tool, the user cannot access the add icon or the edit icon. Summary Summary You should now be able to: Describe how to use users configuration module Define the use of group permissions to restrict user access to DataMart tools You should now be able to: Describe how to use the Users Configuration module Define the use of group permissions to restrict user access to DataMart tools Training roadmap for Netcool/Proviso Training roadmap for Netcool/Proviso http://www.ibm.com/software/tivoli/education/edu_prd.html Copy and paste the link provided into the Web browser of your choice to explore the Netcool/Proviso training roadmap. Trademarks