Troubleshooting guide

2 — 5620 SAM user security tasks
Alcatel-Lucent 5620 Service Aware Manager 2-21
5620 SAM
System Administrator Guide
To ensure that span conflicts do not interfere with network troubleshooting, the
5620 SAM allows a user to execute tests on NEs and service sites that are not in an Edit
Access span of the user. However, activities such as policy distribution, software
upgrades, and statistics collection can be performed only by a user with Edit Access
spans that contain the target objects.
1 Using an account with an assigned security scope of command role, choose
Administration→Security→5620 SAM User Security from the 5620 SAM main menu.
The 5620 SAM User Security - Security Management (Edit) form opens.
2 Click on the Span of Control tab.
3 Click Create and choose Profile. The Span of Control Profile (Create) form opens.
4 Configure the required parameters.
5 Assign one or more spans to the profile:
i Click on the Spans tab. The predefined spans are listed.
ii Click Add and choose an access type. The Select access_type Spans form
opens.
iii Select one or more spans in the list and click OK.
6 Save your changes and close the form.
Procedure 2-6 To create a span rule
A span rule is associated with a format or range policy, and applies to the users and
user groups that are specified in the format or range policy. You can associate multiple
range policies with one user and service type, which enables the automatic addition of
a new service to a specific span based on the service ID specified when the service is
created. By default, the 5620 SAM automatically adds a new service to the Default
Service span.
When you create a span rule, you must specify one of the following to indicate which
spans receive the services that the user creates:
• the Edit Access spans of each user associated with the format or range policy
• each span that is explicitly named in the rule
The span rules associated with a format or range policy take effect for new services
only when the format or range policy is administratively enabled and has a valid
configuration that includes at least one user or user group.
Note — You cannot delete a span of control profile that is assigned to
a user group that contains users.
Release 12.0 R6 | November 2014 | 3HE 08861 AAAF TQZZA Edition 01