products:promonitor:6.8:userguide:administration:authorizations:example4


Different access types depending on companies and system tags

In this example, the Administrator wants to give Redpeaks user “user1” a create/update permission on company “Agentil” for only systems tagged “DEV” and “PROD”.
He also needs to grant permission to delete elements on company “Dev Agentil” for only Systems tagged “DEV” :

  • Step 1 - Creating the Permissions Profiles :
    • Create a Permission Profile named “createUpdate” then check all possible “create/update” and “update” checkboxes.
    • Create a Permission Profile named “deleteOnly” then check all possible “delete” checkboxes.


  • Step 2 - Creating the Authorization Profile :
    • Create a Authorization Profile - in this example it will be named “AgentilTagsManagement” -
    • Leave all Profiles rights and View change tracking checkboxes unchecked


  • Step 3 - Assigning Permission “createUpdate” to company “Agentil” for its systems tagged “DEV” and “PROD”
    • Click on Assign
    • Select “createUpdate” on “Permission profile”, “Agentil” on “Group” and “DEV” on “Tag”.
    • Add
    • Select “createUpdate” on “Permission profile”, “Agentil” on “Group” and “PROD” on “Tag”.
    • Add
    • Save the assignation, save ALSO the Authorization Profile


  • Step 4 - Assigning Permission “deleteOnly” to company “Dev Agentil” for its systems tagged “DEV”
    • Click on Assign
    • Select “deleteOnly” on Permission profile, “Dev Agentil” on Group and “DEV” on Tag.
    • Add
    • Save the assignation, save ALSO the Authorization Profile


  • Step 5 - Associating Authorization Profile “AgentilTagsManagement” to user “user1”
    • Edit Redpeaks User “user1”
    • Select “AgentilTagsManagement” Authorization Profile
    • Add, Save


  • Result
    • Log-in as “user1”
    • Only data from companies “Agentil” and “Dev Agentil” (and their Systems, Connectors, Monitors, etc) are visible.
    • About “Agentil” company :
      • If you try to click on a given systems that are NOT tagged “DEV” or “PROD”, no action will be proposed - displayed - on the that system sub menu.
      • “user1” is authorized to perform “Edit system” and “Add connector” on systems that are tagged “DEV” or “PROD”
      • Notice that “Remove system” is not displayed in the sub menu given that “user1” has only “Create” and “Update” rights on “Agentil” company on Tags “DEV” and “PROD”
    • About “Dev Agentil” company :
      • If you try to click on systems that are NOT tagged “DEV”, no action will be displayed on the System sub menu.
      • “user1” is authorized to perform only “Remove system” on systems that are tagged “DEV”
      • Notice that “Edit system” and “Add connector” are not displayed in the sub menu given that “user1” has only “Delete” rights on only Tag “DEV”
/home/clients/8c48b436badcd3a0bdaaba8c59a54bf1/wiki-web/data/pages/products/promonitor/6.8/userguide/administration/authorizations/example4.txt · Last modified: 2024/05/01 18:35 (external edit)