Providing Portal Access and User Authentication > About User Privileges
  
Version 9.2.01
About User Privileges
Privileges can be set for both individual users and user groups.
There are distinct privilege categories:
Report scope. Using host groups (or a home group), dictates how wide a net a user can cast when generating report data. When you create a user account in the Details setup, you specify a home host group for that user. See also Creating Portal User Accounts.
Reports. Set what report templates a user can access. New system report templates delivered automatically by APTARE, appear in the correct folders when they are introduced. All reports are displayed regardless of the products you have licensed and installed. These report templates must be activated with privilege settings for end users and administrators to use them.
Policies. Configure billing, usage and threshold policies.
Administration. Provides capabilities that typically are reserved for administrators including managing hosts and host groups, advanced parameters, Discovery and security.
Cloud. Enable access to new user report templates delivered through the Cloud section of the Explorer.
Report Designers. Create custom Report Templates using either the Dynamic Template Designer or the SQL Template Designer.
Various categories of privileges enable you to tailor user access capabilities:
Table 11.1 User Privileges
Privilege Category
Privilege Description
Comments
Reports
Report Group Access
Access to various reports within a group—for example, System Administration or Management Reports.
Access can be on a per-report basis or for an entire report menu group.
Policies
Billing, Usage and Threshold Policies
Access to the Billing and Usage, Chargeback, Threshold, and Backup window policy screens.
Users with this privilege can add/update/delete host group specific Gbyte and Tape Media Consumption Billing Policies for their home group, and host groups below their home group.
Administration
Hosts and Host Groups
Browse Hosts - Enables the user to Search for hosts on the Host Group Administration page. It also provides the Host Management page in read-only mode.
Manage Hosts - Provides the user access to view and modify host details. Adding, editing and removing hosts from host groups is also permitted. The Manage Hosts permission includes Browse Hosts permissions.
Manage Host Groups - Provides the user the ability to manage host group membership: add/remove, move. Note: If you attempt to remove a host that is the only member in a group and it will become an orphan by removing it from this group. You must also have Manage Hosts permission.
Permanently Delete Hosts - Manage Hosts enables the user to remove hosts from groups. This privilege enables the user to permanently delete them from the system.
Import Hosts from CSV - Enables the user to use a CSV file to add/update hosts from an external source and ultimately manage them from the Host Management page.
After an upgrade, Browse is selected for all users by default.
For a new install, no privileges are selected by default and must be explicitly set by a Super User.
Enable the permission to set and remove Host Attributes under the Security section. The selection also enables bulk assigning/modifying attributes and their values on the Host Management page.
 
Control Panels
Provides management of:
Discovery
Data Collector Policies
Data Collector Upgrades
Advanced Parameters
 
Security
Provides the ability to authorize management of specific functions:
User Administration
Data Collection Status
Host Attributes
User Groups
Domains
Schedules
Email/Export on Schedule*
Share Reports
System Notifications**
Object Attributes
Support Tools
Create Ticket
File List Export
*The privilege Email/Export on Schedule is active by default for the Admin role.
**The privilege System Notifications is only available to the Super User.
Host Attributes: Enables bulk assigning/modifying attributes and their values on the Host Management page. This permission requires that you enable the Browse permission under Hosts and Host Groups.
Cloud
Enables access to new and updated reports delivered by APTARE through the Cloud.
The Cloud section is only displayed on the Explorer when this privilege is enabled.
Report Designers
Enable access to several tools for developing custom Report Templates:
Dynamic Template Designer
SQL Template Designer
Method Designer