Troubleshooting guide

2 — 5620 SAM user security tasks
Alcatel-Lucent 5620 Service Aware Manager 2-17
5620 SAM
System Administrator Guide
Procedure 2-2 To create a scope of command role
A scope of command role specifies the read, create, update, and delete access
permissions for a 5620 SAM object type or package. You can create custom roles by
assigning specific access permissions to different 5620 SAM functional areas. The
functional areas are organized in packages, methods, and classes. See Appendix A for
a list of all access permissions that can be assigned to a scope of command role.
You can create an original scope of command role, or copy an existing role and modify
the role permissions to create a role. The 5620 SAM has several predefined scope of
command roles. See Appendix A for a list of the permissions, access levels, and
descriptions of all predefined scope of command roles and profiles.
1 Using an account with an assigned security scope of command role, choose
Administration→Security→5620 SAM User Security from the 5620 SAM main menu.
The 5620 SAM User Security - Security Management (Edit) form opens.
2 Click on the Scope of Command tab.
3 Click Create and choose Role. The Role (Create) form opens.
4 Configure the required parameters.
5 Configure the permissions for the scope of command role:
i Click on the Permissions tab. A list of the 5620 SAM packages, classes, and
methods is displayed.
ii Select the required access permissions, which are displayed in the list column
headings, for each package, class, or method that you need to assign to the
scope of command role.
6 Save your changes and close the form.
Note 1 — When you create a scope of command role, you must enable
create, update/execute, and delete access to allow the modification of
a class or package.
Note 2 — You cannot delete a predefined scope of command role.
Note 3 — You cannot delete a scope of command role that is assigned
to a scope of command profile when the scope of command profile is
assigned to a user group that contains users.
Note — When you enable the Create permission for a 5620 SAM
package, method, or class, the Update/Execute permission is
automatically enabled.
When you enable the Update/Execute permission for a 5620 SAM
package, method, or class, the Create permission is not automatically
enabled.
Release 12.0 R6 | November 2014 | 3HE 08861 AAAF TQZZA Edition 01