System-Wide Permissions

You can set system-wide permissions on the user group's Details page or by using the udb.g.mod command.

For ideas on how you might set up user permissions based on user groups, see Planning User Groups and User Accounts. For instructions on how to implement permissions with your user groups, see How to Create User Groups.

The following list includes all system-wide, user group permissions.

• Host administration. Listed in the browser interface as Hosts.

  You must have host administration permissions if you want to create, edit, or delete hosts, host sets, host searches, or host types.

• User and user group administration. Listed as admin: users & groups.

  You must have permissions on users and user groups to create, edit, or delete users or user groups.

• Notification rules.

  You must have notification rules permissions to set up email notification for system events.

• Comparisons.

  You must have comparison permissions to create, edit, delete, or run comparisons. When comparison permissions are granted, the host set to run comparisons on must also be set.

System-wide Permission Characteristics

• All users are given read permissions on all provisioning system objects by default.

• Users are assigned privileges based on the groups they belong to. You can add permissions to a group if you have user and group administration permissions.

• User groups that have write permissions for a particular object type have write permissions on all objects of that type.

  For example, if a user is assigned to a group that has write permissions for host administration, that user can make changes to all hosts, host sets, host searches, and host types.

• Users in the admin user group have read, write, and execute permissions on all objects by default.

• Permissions for the admin group cannot be removed or modified.