Troubleshooting guide

2 — 5620 SAM user security
Alcatel-Lucent 5620 Service Aware Manager 2-17
5620 SAM
System Administrator Guide
Procedure 2-1 To reserve an admin account login
You can reserve one client GUI session from the maximum number of sessions allowed
by the license key, for admin users only. This allows an administrator to manage the
existing client GUI sessions. You must have an account with an assigned security scope
of command role to perform this procedure.
1 Choose Administration→Security→5620 SAM User Security from the 5620 SAM
main menu. The 5620 SAM User Security - Security Management (Edit) form opens.
2 Configure the Reserve Administrator Login parameter.
3 Save your changes and close the form.
4 Log in as required.
Procedure 2-2 To create a scope of command role
A scope of command role specifies the read, create, update, and delete access
permissions for a 5620 SAM object type or package. You can create custom roles by
assigning specific access permissions to different 5620 SAM functional areas. The
functional areas are organized in packages, methods, and classes. See Appendix A for
a list of all access permissions that can be assigned to a scope of command role.
You can create an original scope of command role, or copy an existing role and modify
the role permissions to create a role. The 5620 SAM has several predefined scope of
command roles. See Appendix A for a list of the permissions, access levels, and
descriptions of all predefined scope of command roles and profiles.
1 Using an account with an assigned security scope of command role, choose
Administration→Security→5620 SAM User Security from the 5620 SAM main menu.
The 5620 SAM User Security - Security Management (Edit) form opens.
2 Click on the Scope of Command tab.
3 Click Create and choose Role. The Role (Create) form opens.
4 Configure the required parameters.
Note 1 — When you create a scope of command role, you must enable
create, update/execute, and delete access to allow the modification of
a class or package.
Note 2 — You cannot delete a predefined scope of command role.
Note 3 — You cannot delete a scope of command role that is assigned
to a scope of command profile when the scope of command profile is
assigned to a user group that contains users.
Release 13.0 R2 | May 2015 | 3HE 09815 AAAB TQZZA Edition 01