Access to CMDB Workspace

[Namita Mishra]

Hi,

Can a user with cmdb_read or itil role (any one of these not both) access the CMDB workspace?

I have checked the documentation and it mentions that cmdb_ms_user role contains cmdb_read role and that the user with this role gets the read-only access to multisource data, CMDB 360 queries, and to related UIs such as CMDB 360 reports and dashboards, and Multisource Report Builder.

In Strategic Portfolio Management application (SPM), few roles such as it_portfolio_manager and it_program_manager also contains cmdb_read role.

 However the user is NOT able to see the "CMDB Workspace" option itself in the workspace menu that is why I am reaching out to community to check. In my understanding, the user with cmdb_read role should be able to access the CMDB workspace with read only view.

Followup question: If my understanding is not correct then the user with cmdb_read role is entitled to view which all items in CMDB? Please clarify.

Screenshot below when accessed by the portfolio manager persona with cmdb_read role.

 

:

 

Appreciate your prompt response. Thanks in Advance!

Thank You!

Namita Mishra

[James Chun]

Hi @Namita Mishra,

I believe the document is stating that a user needs the cmdb_ms_user role to access the CMDB 360 queries and the such.

So, although the it_portfolio_manager role contains the cmdb_read role, since it does not contain the cmdb_ms_user role, the user won't be access the CMDB 360 queries and the such. 

Additionally, I noticed that granting the cmdb_ms_user role does not necessarily grant the access to the CMDB Workspace.

Cheers

[Namita Mishra]

Hi @James Chun ,

Thanks for checking and prompt response.

You are correct that CMDB 360 queries are not shown to the user with cmdb_user role.

I further tested after posting this and found that cmdb_read access provides access to CMDB group and CMDB reports. User can see the CMDB groups and in some cases there are few reports shown. By the way, I (as an admin) has not shared any report.

I think some more testing is required to find out why in some cases reports are shown and in some cases, no reports are shown..

Thanks Again !!

Have a Wonderful Day !!

Thank You!

Namita Mishra

[Swapna Abburi]

Hi @Namita Mishra 

Also, below role(s) are needed to access CMDB workspace as per documentation.

sn_cmdb_admin (CMDB Admin), sn_cmdb_editor (CMDB Editor), or sn_cmdb_user (CMDB User).

[Namita Mishra]

Thank You @Swapna Abburi