Providing Portal Access and User Authentication > About User Privileges
  
Version 10.0.01
About User Privileges
Privileges can be set for both user groups and individual users.
See also:
• About User Types
• Assigning User Privileges
• Deactivating User Accounts
There are distinct privilege categories:
• Report scope. Using host groups (or a home group), dictates how wide a net a user can cast when generating report data. When you create a user account in the Details setup, you specify a home host group for that user. See also Creating Portal User Accounts.
• Reports. Set what report templates a user can access. New system report templates delivered automatically by APTARE, appear in the correct folders when they are introduced. All reports are displayed regardless of the products you have licensed and installed. These report templates must be activated with privilege settings for end users and administrators to use them.
• Policies. Configure billing, usage and threshold policies.
• Administration. Provides capabilities that typically are reserved for administrators including managing hosts and host groups, advanced parameters, Discovery and security.
• Cloud. Enable access to new user report templates delivered through the Cloud section of the Reports tab.
• Report Designers. Create custom Report Templates using either the Dynamic Template Designer or the SQL Template Designer.
• Inventory. Enable access to and security for the Inventory tab. Reports and templates available through the Inventory tab are controlled by Report privileges.
Note: Portal upgrades will automatically enable privileges for newly added reports and the display of the Inventory view, for all Administrators. Refer to the APTARE StorageConsole Release Notes for the list of reports and features introduced in a specific product release.
Various categories of privileges enable you to tailor user access capabilities:
Table 1 User Privileges
Privilege Category
Privilege Description
Comments
Administration
Control Panels
Provides management of:
Advanced Parameters
Data Collector Policies
Data Collector Upgrades
Discovery
 
Hosts and Host Groups
Browse Hosts - Enables the user to Search for hosts on the Host Group Administration page. It also provides the Host Management page in read-only mode.
Import Hosts from CSV - Enables the user to use a CSV file to add/update hosts from an external source and ultimately manage them from the Host Management page.
Manage Host Groups - Provides the user the ability to manage host group membership: add/remove, move. Note: If you attempt to remove a host that is the only member in a group and it will become an orphan by removing it from this group. You must also have Manage Hosts privilege.
Manage Hosts - Provides the user access to view and modify host details. Adding, editing and removing hosts from host groups is also permitted. The Manage Hosts privilege includes Browse Hosts privileges.
Permanently Delete Hosts - Manage Hosts enables the user to remove hosts from groups. This privilege enables the user to permanently delete them from the system. This privilege also enables decommission and recommission. This privilege is restricted to the Host Management page.
After an upgrade, Browse is selected for all users by default.
For a new install, no privileges are selected by default and must be explicitly set by a Super User.
Enable the privilege to set and remove Host Attributes under the Security section. The selection also enables bulk assigning/modifying attributes and their values on the Host Management page.
 
Security
Provides the ability to authorize management of specific functions:
Create Ticket
Data Collection Status
Domains
Email/Export on Schedule*
File List Export
Host Attributes
Object Attributes
Schedules
Share Reports
Support Tools
System Notifications**
User Administration
User Groups
*The privilege Email/Export on Schedule is active by default for the Admin role.
**The privilege System Notifications is only available to the Super User.
Host Attributes: Enables bulk assigning/modifying attributes and their values on the Host Management page. This privilege requires that you enable the Browse privilege under Hosts and Host Groups.
User Groups privilege also covers the creation of home pages for user groups.
 
Cloud
Enables access to new and updated reports delivered by APTARE through the Cloud.
The Cloud section is only displayed on the Reports tab when this privilege is enabled.
Inventory
 
 
Browse Inventory
Enable Access - Enables or restricts the ability to enable access to the Inventory tab.
Reports and templates available through the Inventory tab are individually controlled by Report-specific privileges.
Security
Enables or restricts the ability to Assign Attributes and Permanently Delete Objects.
These privileges are specific to the Inventory tab.
Policies
Billing, Usage and Threshold Policies
Access to the Billing and Usage, Chargeback, Threshold, and Backup window policy screens.
Users with this privilege can add/update/delete host group specific Gbyte and Tape Media Consumption Billing Policies for their home group, and host groups below their home group.
Report Designers
Enable access to several tools for developing custom Report Templates:
Dynamic Template Designer
SQL Template Designer
Method Designer
Reports
Report Group Access
Access to various reports within a product/group—for example, System Administration or Management Reports.
Access can be on a per-report basis or for an entire report menu group.