Providing access to Business Services only from Config application menu.

[Matt W]

I'm trying to restrict access so that a couple of users can only access Business Services via the Configuration application. The reason I want to do this is to allow them to create outages if required under Business Services. I've had a look around and am a bit stuck on how I go about this. I've looked at current roles and as far as I can see there isn't one for just Business Services.

Any help would be greatly appreciated, Matt.

[Dubz]

So is your requirement to prevent all access to the business services table except to a couple of users?

There are a couple of ways to do it, you could simply restrict access to the application menu/module but if you're restricting based on specific users you'll need to administer this whenever the access requirements change.

A better way would be to create a new role and either restrict access to the application menu based on that role or set up ACL's to control access to the table based on that role. 

[Matt W]

Hi David,

My requirement is to create a role to be able to get to the Business Services and create outages rather than give access to all of configuration so reading your comments setting up a new ACL to control access to the table may be the best bet?

[Dubz]

Yeah, there's no OOB role that does that as far as i'm aware so you'll need to make your own.

[Nikhil Dixit · Accepted solution]

Hi Matt,

1. You can enable (show) or disable (hide) an application menu or module in the application navigator. You can customize the application navigator to provide different modules by user role, modify or define applications and modules, and change its appearance.

Procedure

1. Navigate to System Definition > Application Menus.
2. If you are enabling an application menu, click All in the breadcrumbs to display both active and inactive application menus (remove the default filter condition).
3. Click the desired title. The application menu record opens and the Modules related list shows the modules that appear in the application navigator.
4. Enable or disable the application menu and modules as desired.

   Option	Description
   Enable or disable a specific module in the application	Double-click the Active field beside the module name in the Modules related list. Set Active to true (show) or false (hide).
   Enable or disable multiple modules at the same time	Select the check boxes next to the module names. Select Change active state from the Actions choice list.
   Enable or disable the entire application menu (for example, Incident or Service Catalog)	Select or clear the Active check box.
   Restrict the application menu to specific roles	Use the Roles field.

5. Click Update.
   When you change application menus or modules, the application navigator automatically refreshes to display the changes.

2. Assign user roles to service groups to control user access to business or IT services as per your requirement. Users inherit permissions from roles that are assigned to them.

Service Mapping provides these pre-configured roles.

Event Management provides these preconfigured roles

3. You can write ACLs to control access to the table based on any role (as per requirement).

Hope it will help you. Please mark this post correct and helpful if it is so.

Thanks,

Nikhil Dixit