Skip to main content

Granting users rights on resources

Resource access rules allow you to grant users the right to see specific resources.

By default, all users can see all resources. This is because a default access rule called "ALL" is created automatically when the platform is installed. Users with the Administrator role can see all resources in all cases, even if no rule grants them this right explicitly.

Administrators can create more specific rules to determine which users can see which resources. Only administrators can access the Resource Acces Management screen.

You can create as many rules as you want. If a user is mentioned in two access rules with different rights, they will be granted all rights.

Granting users rights​

If you don't want all users to see all resources, you need to:

  1. Delete the default rule called "ALL".
  2. Create the rules you want for your users.

Creating an access rule​

  1. Go to Administration > ACL > Resource Access Management, and then click the Add button above the list, on the left. A window appears.

  2. Enter a name and a description for the rule.

  3. In the Add resource datasets section, define which resources you want to grant access to:

    • Select a type of resource from the list, then select which of the corresponding resources you want to allow access to.
    • To refine your selection, click Add filter and select narrower criteria: the second filter only shows the resources that depend from the first filter.
    • If you want to add another set of resources that do not depend on any of the criteria defined above, click Add new dataset. The list will propose all types of resources again.

    You can also select All resources: users will see all existing resources, as well as be able to see any resources created afterwards automatically. If you select a group of resources (hosts, services, BVs), users will see all existing resources in the group, as well as see any resources added to the group afterwards automatically.

  4. In the Contacts/contact groups section, define which users will be able to see these resources. If you select All contacts/All contact groups, the rule will apply to all existing contacts/contact groups, and also to any contacts/contact groups created in the future. Bear in mind that users and user groups are managed using the CIAM.

  5. Click Save. The new rule appears in the list. It can take up to one minute to be applied.

Managing access rules​

  • To duplicate a rule, click the Duplicate button for this rule in the Actions column.
  • To delete a particular rule, click the Delete button for this rule in the Actions column.
  • To delete several rules, select them by checking the corresponding boxes in the left column, then click the Delete button above the list.
  • You can disable a rule instead of deleting it if you think you might use it again later: use the switch for this rule in the Status column. The designated users will no longer be able to see the corresponding resources.