Is there a role for Configuration Managers?

[peterraeves]

Is there a specific role for Configuration Managers, that need to maintain the CMDB?

Our customer asked to create a group for users that are responsible for the CMDB. Creating a group is easy, but I could not seem to find the role that should be given to this group for CMDB management.

[Atul Kumar2]

Hi Peter,

You can use the role (ecmdb_admin). for managing the cmdb enterprise.

Hope this helps.

Regards,

Atul Kumar

[peterraeves · Accepted solution]

I looked at the modules and it looks like you would need the itil or asset role to maintain the cmdb.

[Larry Youngqui1]

Peter,

I actually read your question slightly differently.  

I am in the process of building out a 'CMDB System Process' and need to assign roles to those "Configuration Managers" that will assist in overseeing and managing specific CI Classes.     I'm calling them "CI Class Managers" and their function will be to provide oversight on assigned CI classes.     For example, I need Server Administrators familiar with our models to provide guidance on required attributes for servers.     Network Administrators for network gear.   Etc. Etc.     They would also provide SME resources for discovery patterns and help troubleshoot CI identifier rules.

I don't want to grant them ecmdb_admin permissions, but do need them to have specific rights and capabilities beyond a normal consumer of CI data.     I will reserve the ecmdb_admin role for myself and use it to add or modify CI Classes or attributes.     Any recommendations or required changes they need to the CMDB hierarchy would flow through a single ecmdb_admin.  

At this point, my strategy is to grant them only a 'certification' role (part of the Data Certification process) and allow them to perform certification tasks coming out of audits and assessments that are made in support of maintaining accuracy of the CMDB data.     As we implement our CMDB System Process, we may discover additional permissions that we want to grant these 'elevated' CMDB users, but for now, we'll go with this.

I'd be interested if anyone else used a different tactic.

[big-m0dem]

Larry,

Don't most of your SME's for your classes already have the ITIL role, which would already allow them to modify data in the CMDB? This is what I am running into. I want to implement something where I can give SME's access to view the CI data, but not necessarily change it, unless granted additional authority.