Well then, you should be able to use the existing permission groups to accomplish that. App-Administrator allows access to all of the data elements in HD 5.6 without allowing access to any code. If you need to make it more granular, you'd have to create sub-App-Admin groups for each component. If your version of AR System supports computed groups, that would also work.
Rick On Wed, Mar 5, 2008 at 9:10 AM, Gentry, Elmo - Raleigh, NC < [EMAIL PROTECTED]> wrote: > Here is what I found documented: > > > > Subadministrators can perform the following functions: > > Administer any application or form to which their group has > > subadministrator access. > > Create and administer filters, active links, and escalations connected > to > > forms to which their group has subadministrative access. > > Create and administer menus. > > Create forms. > > Create applications (depending on the forms to which the > > subadministrator has access). > > Create active link and filter guides. > > View server information settings. > > > > No of these can be allowed. We need to separate/prevent all of the > above. If the permission allows the user to create anything, filters, > forms, etc that is too much access. When I say sub-admin I mean really > application/data admin….only to create data, i.e. CTI's, Groups. Users, > Location, Approvals, etc. > > > > > > Thanks, > > > > Elmo Gentry > Remedy Application Development > Business Systems Analyst > > > ------------------------------ > > *From:* Action Request System discussion list(ARSList) [mailto: > [EMAIL PROTECTED] *On Behalf Of *Rick Cook > *Sent:* Wednesday, March 05, 2008 11:48 AM > *To:* [email protected] > *Subject:* Re: Separation of Duties > > > > ** SubAdmins are your ticket. Only give Administrator access to > developers, and SA to everyone else. It's more work to set it up, but will > get you what you want. All the info you need is in the docs. > > Rick > > On Wed, Mar 5, 2008 at 8:02 AM, Gentry, Elmo - Raleigh, NC < > [EMAIL PROTECTED]> wrote: > > ** > > Overview: I need to separate the Admin permission (creating Forms, AL's, > Filters, everything in the admin tool, etc) from everything in the > Configuration Manager console (CTI's, Location, Groups, etc). > > I need to duplicate ALL of Configuration Manager console actions with a > non-Admin, Sub-Admin like permissions. > > Any thoughts or suggestions? Preferable easy thoughts and/or suggestions. > ? > > Currently running ITSM 5.6; Problem, Change and Asset. ITSM 7 is not > really an option at this time > > Thanks, > > > > Elmo Gentry > > Remedy Application Development > > Business Systems Analyst > > United States Postal Service > 4200 Wake Forest Rd > Raleigh, NC 27668-9000 > [EMAIL PROTECTED] > > > > [image: United States Postal Service Logo with Eagle]<http://blue.usps.gov/> > > > > __Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" > html___ > > > __Platinum Sponsor: www.rmsportal.com ARSlist: "Where the Answers Are" > html___ >
