Privileges

Privileges enables you to grant users access to the CCM, Monitoring and Administration Tools, and ViewPoint Manager and perform actions based on the defined access level. To activate privileges for the user, you must define each privilege with at least a Browse access level, as described in the following table:

Access Level

Table Header

None

Disables the user from viewing, adding, editing, and deleting objects in Control-M

Browse

Enables the user to view and refresh objects in Control-M

Update

Enables the user to add and edit objects in Control-M Workload AutomationControl-M

Full

Enables the user to add, edit, and delete objects in Control-M

Default

Inherits the authorizations from the associated group. (Valid for user authorizations. Not valid for group authorizations.)

EXAMPLE: User JimA belongs to group Staff. Group Staff has Update authority for all Collections, Hierarchies, Filters, and ViewPoints but only Browse authority for Authorization definitions, Alerts, and Archived ViewPoints. JimA is defined with Default authority for all definitions and Update authority for Communication. JimA can create and modify ViewPoints as well as add, modify, and delete Control-M installations from the Control-M/EM database.

The following table describes each privilege component and determines the actions that a user or member of a group can perform on different parts of Control-M/EM:

Privilege

Category

Description

CLI

Client Access

Enables the user to perform administration tasks from a Command Line Interface

Control-M Configuration Manager

Client Access

Enables the user to log in to the Control-M Configuration Manager.

Control-M Self Service

Client Access

Enables the user to log in to Control-M Self Service.

Control-M Workload Change Manager

Client Access

Enables the user to log in to the Control-M Workload Change Manager.

Control-M Workload AutomationControl-M, Utilities, EM API, BIM Web UI

Client Access

Enables the user to access the following items: Control-M Workload AutomationControl-M, Utilities, API, and Control-M Batch Impact Manager web interface.

Authorizations

Control-M Configuration Manager

Enables the user to apply authorizations on other users in Control-M/EM, such as Calendars and Folders, as described in Control-M/EM Authorizations

Configuration

Control-M Configuration Manager

Enables the user to create, edit, and delete, Control-M/EM, Control-M/Server, and Control-M/Agent components, as described in Component management

Operation

Control-M Configuration Manager

Enables the user to start, stop, recycle, and ignore components, as described in Component status

Database Maintenance

Control-M Configuration Manager

Enables the user to check database space and extend the database size, as described in Checking Database space

Security

Control-M Configuration Manager

Enables the user to create, update, view, and delete user and group security records, as described in Control-M security as well create, edit, copy, export, test, and delete connection profiles for an external application. For more details about connection profile management, see <External_Application> Administration.

ViewPoints

Monitoring and Administration Tools

Enables the user to access ViewPoints

Alerts

Monitoring and Administration Tools

Enables the user to handle and unhandle alerts

BIM Reports

Monitoring and Administration Tools

Enables the user to generate BIM reports

Forecast Reports

Monitoring and Administration Tools

Enables the user to generate Forecast reports

Periodical Statistics

Monitoring and Administration Tools

Enables the user to use Periodical Statistics on a job

BIM/Forecast Configuration

Monitoring and Administration Tools

Enables the user to configure BMC Batch Impact Manager and Control-M/Forecast

Collections

Viewpoint Manager

Enables the user to create Collections

Hierarchies

Viewpoint Manager

Enables the user to create Hierarchies

Filters

Viewpoint Manager

Enables the user to create Filters

Archived Viewpoints

Viewpoint Manager

Enables the user to create Archived Viewpoints

Parent Topic

Control-M/EM user and group authorizations