Owners Manual

Access Profile Templates | Serving Multiple Customer Accounts
OMNM 6.5.2 User Guide 659
Access Profile Templates
Configure data access for Multitenant Service Providers (MSPs) through an Access Profile (AP),
configured in these portlets as described in
AP Editor/AP Template Editor on page 660, or more
accurately, in that AP Template plus whatever customization you configure for Site Management
when you assign it an AP.
An AP describes which entities within the system a site can access. When enforcing AP-based
access, OpenManage Network Manager identifies applicable entities based upon the Site ID. The
fundamental difference between this approach and Site ID filtering is its ability to access an entity
from multiple sites. For example multiple customer sites can have access to an AP template.
This approach, along with functional permissions, lets MSPs control exactly what their customers
can do and see.
For example, an MSP offers Gold, Silver and Bronze tiers of service. At the Gold level customers
have access to 12 pre-defined reports and they can create their own reports from existing report
templates. At the Silver level customers can only access the 12 per-defined reports and at Bronze
level the customer can only access three reports, a subset of the 12.
To do this within OpenManage Network Manager, the MSP would first create the necessary report
templates and report definitions. Assume there are eight templates and 12 report definitions. At
the Gold level the MSP would provide access to the eight templates and the 12 report definitions.
The MSP could also give gold customers the functional permission to create a report definition. At
the Silver level the MSP gives the customer access to the 12 reports but no functional permission to
create new reports. Since customer at the silver tier cannot create report definitions they also
cannot access report templates. Finally at the Bronze level the MSP provides access to the three
specific reports available at that service level. In all cases, only target devices assigned to the
respective sites appear in the report(s).
This portlet lets you configure the kind of access available to customers configured in the
Site
Management
portlet.
This displays a profile’s
Name, Description, and Created date by default. You can also add a column
to display its
Updated date. The expanded portlet displays the same columns and a Reference Tree
snap-in showing connections to the selected Profile.
This portlet’s right-click menu has the following items:
New/Edit —Create a new or edit an existing template with the AP Editor/AP Template Editor .
Create Access Profiles when you assign them to sites by right-clicking in the
Site
Management
portlet.
Delete —Remove a selected profile.