ITOM Roles and Rights

Home > Administration > ITOM > Roles and Rights

Index

Introduction ITOM provides additional rights that can be assigned to a security role, allowing access to individual features. One System Security Role is currently provided, enabling full access to any user account that is a member. If this role is not favourable the creation of a Custom Role, containing a combination of the ITOM rights detailed below, and the many others provided by the Hornbill platform, can be used.

Related Articles Roles Explained

• Roles

• ITOM Application Administration

Enables assigned users full access to the ITOM administration interface

• ITOM application User

Enables assigned users full access to the ITOM application

• Rights

• Manage Automation Jobs

Enables access to the job queue where IT Automation and Discovery Jobs can be initiated and monitored

• Manage Inventory

Enables access to the inventory where devices can be organised and there managed status set

• Manage Runbooks

Enables access to the Runbook orchestration features

• Manage Site Integration Services

Enables the creation and management Site Integration Connectors

• Manage Site Integration Packages

Enables the ability to create and manage custom packages

• Table Rights

Access to the following tables are required and its recommended that full access is provided, with restrictions to features only controlled by the use of the ITOM rights detailed above.

• h_inv_computer

• h_inv_installed_options

• h_inv_installed_software

• h_inv_ip_networks

• h_inv_list

• h_inv_listcomputer

• h_sis_groups

• h_sis_installed_packages

• h_sis_jobs

• h_sis_packages

• h_sis_published_packages

• h_sis_servers

• Additional Roles

• Business Process Manager

Required for access to the orchestration features provided by Runbooks (powered by the BPM)

It should be noted that the above rights may also be additionally restricted by the ITOM subscription policy applied to the Hornbill instance.

The ITOM Administrator role is no longer required and should be replaced with the ITOM Application Administrator and ITOM Application User