Privileges

Privileges enables you to grant users access to the CCM, Monitoring and Administration Tools, and ViewPoint Manager and perform actions based on the defined access level. To activate privileges for the user, you must define each privilege with at least a Browse access level, as described in the following table:

Access Level	Description
None	Disables the user from viewing, adding, editing, and deleting objects in Control-M
Browse	Enables the user to view and refresh objects in Control-M
Update	Enables the user to add and edit objects in Control-M
Full	Enables the user to add, edit, and delete objects in Control-M
Default	Inherits the authorizations from the associated group. (Valid for user authorizations. Not valid for group authorizations.)

EXAMPLE: User JimA belongs to group Staff. Group Staff has Update authority for all Collections, Hierarchies, Filters, and ViewPoints but only Browse authority for Authorization definitions, Alerts, and Archived ViewPoints. JimA is defined with Default authority for all definitions and Update authority for Communication. JimA can create and modify ViewPoints as well as add, modify, and delete Control-M installations from the Control-M/EM database.

The following table describes each privilege component and determines the actions that a user or member of a group can perform on different parts of Control-M/EM:

Privilege	Category	Description
CLI	Client Access	Enables the user to perform administration tasks from a Command Line Interface. For more information, see cli utility.
Control-M Configuration Manager	Client Access	Enables the user to log in to the Control-M Configuration Manager.
Control-M Self Service	Client Access	Enables the user to log in to Control-M Self Service.
Control-M Workload Change Manager	Client Access	Enables the user to log in to the Control-M Workload Change Manager.
Control-M, Utilities, EM API	Client Access	Enables the user to access the following items: Control-M (Utilities, API) Control-M Self Service Control-M Workload Change Manager
Authorizations	Control-M Configuration Manager	Enables the user to apply authorizations on other users in Control-M/EM, such as Calendars and Folders, as described in Control-M/EM Authorizations
Configuration	Control-M Configuration Manager	Enables the user to create, edit, and delete, Control-M/EM, Control-M/Server, and Control-M/Agent components, as described in Component management
Operation	Control-M Configuration Manager	Enables the user to start, stop, recycle, and ignore components, as described in Component status
Database Maintenance	Control-M Configuration Manager	Enables the user to check database space and extend the database size, as described in Checking Database space
Security	Control-M Configuration Manager	Enables the user to create, update, view, and delete user and group security records, as described in Control-M security as well create, edit, copy, export, test, and delete connection profiles for an external application. For more details about connection profile management, see the Control-M Application Plug-in documentation.
Archived ViewPoints	Monitoring and Administration Tools	Enables the user to access Archived ViewPoints
Alerts	Monitoring and Administration Tools	Enables the user to handle and unhandle alerts
BIM Reports	Monitoring and Administration Tools	Enables the user to generate BIM reports
Forecast Reports	Monitoring and Administration Tools	Enables the user to generate Forecast reports
Periodical Statistics	Monitoring and Administration Tools	Enables the user to use Periodical Statistics on a job
BIM/Forecast Configuration	Monitoring and Administration Tools	Enables the user to configure BMC Batch Impact Manager and Control-M/Forecast
Promotion Rules	Monitoring and Administration Tools	Enables the user to define promotion rules.
Promotion Action	Monitoring and Administration Tools	Enables the user to set the following authorization levels for a promotion action. None: The user is unable promote Update: The user can create a promotion request but the immediate promotion option is disabled. Full: The user can use promotion request and immediate promote
Site Standard and Site Customization	Monitoring and Administration Tools	Enables the user to do the following: Define settings that ensure Control-M Workload Change Manager web users and Control-M schedulers follow your organization's standards. Simplify job properties and restrict creation of job types.
Collections	Viewpoint Manager	Enables the user to create Collections
Hierarchies	Viewpoint Manager	Enables the user to create Hierarchies
Filters	Viewpoint Manager	Enables the user to create Filters
Viewpoints	Viewpoint Manager	Enables the user to create Viewpoints

Parent Topic

Control-M/EM user and group authorizations