Users Guide

Table 2. OpenManage Enterprise User role types (continued)
User with this role... Has the following user privileges
● Change the user password
Device Manager (DM)
● Run tasks, policies, and other actions on the devices
(scope) assigned by the Administrator.
Viewer
● Can only view information displayed on OpenManage
Enterprise and run reports.
● By default, has read-only access to the console and all
groups.
● Cannot run tasks or create and manage policies.
NOTE:
● If a Viewer or DM is changed to an Administrator, they get the full Administrator privileges. If a Viewer is changed to a
DM, the Viewer gets the privileges of a DM.
● Any change to the user role takes effect immediately and the impacted user(s) will be logged out of their active session.
● An audit log is recorded when:
○ A group is assigned or access permission is changed.
○ User role is modified.
Related information
Role and scope-based access control in OpenManage Enterprise on page 15
Role and scope-based access control in OpenManage
Enterprise
OpenManage Enterprise has Role Based Access Control (RBAC) that clearly defines the user privileges for the three built-in
roles—Administrator, Device Manager, and Viewer. Additionally, using the Scope-Based Access Control (SBAC) an administrator
can limit the device groups that a device manager has access to. The following topics further explain the RBAC and SBAC
features.
Role-Based Access Control (RBAC) privileges in OpenManage Enterprise
Users are assigned roles which determine their level of access to the appliance settings and device management features.
This feature is termed as Role-Based Access Control (RBAC). The console enforces the privilege required for a certain action
before allowing the action. For more information about managing users on OpenManage Enterprise, see Manage OpenManage
Enterprise users on page 141.
This table lists the various privileges that are enabled for each role.
Table 3. Role-based user privileges in OpenManage Enterprise
OpenManage
Enterprise features
Privilege Description User levels for accessing OpenManage Enterprise
Admin Device Manager Viewer
Appliance setup Global appliance settings involving
setting up of the appliance.
Y N N
Security setup Appliance security settings Y N N
Alert management Alerts actions / management Y N N
Fabric management Fabric actions / management Y N N
Security features in OpenManage Enterprise 15