Managing Roles

In the Cloud Console, a role is a collection of permissions that defines the level of access granted to a user group. Permissions allow users to perform tasks such as performing backup, restore, and administrative operations (for example, license administration) on entities. To use role-based security, you must create a security association between user groups, a role, and service CommCells.

Before You Begin

• You must be the service CommCell tenant administrator or a part of the master user group on the service CommCell.

• Review the User Security Permissions and Permitted Actions by Feature.

Adding a Role

1. From the Global Command Center navigation pane, go to Manage > Config blueprint > Security.

2. CLick the Roles tile.

   The Roles page appears.

3. Click Add Role.

   The Add Role dialog box appears.

4. Enter a role name.

5. To add permissions, select the check box next to the permission.

6. Click Save.

7. On the Targets tab, in the upper-right area of the table, click Add.

   The Add dialog box appears.

8. From the Target list, search and select the required target.

9. Click OK.

10. Click Save.

Modifying a Role

1. From the Global Command Center navigation pane, go to Manage > Config blueprint > Security.

2. CLick the Roles tile.

   The Roles page appears.

3. Click the role name.

   The Edit role dialog box appears.

4. Add or remove permissions:

   • To add a permission, select the check box next to the permission.

   • To remove a permission, clear the check box next to the permission.

5. Modify the security associations:

   • Select the Enable role check box to enable the security associations that use the role.

   • Remove the selection for the Enable role check box to disable the security associations that use the role.

6. Click Save.