...

sos:products:joc:administration:controller:view

Assignment Operations

Anchor
add_role add_role

Add Role

A role can be added from the Roles view by use of the Add Role button like this:

Image Added

x

Anchor
add_permissions add_permissions

Add Permissions

...

Permissions can be modified by moving the mouse to one of the permissions displayed:

Image RemovedImage Added

When the mouse is hovering the permission then the following editing icons are displayed:

Image RemovedImage Added

Explanation:

• The pencil icon is displayed to offer modification of the permission.
• The X icon can be used to remove a permission from a role.
  • Note that a role must be configured to be assigned either a permission or a folder as otherwise the role is considered empty and will be deleted.

...

By default user accounts are granted permissions for any Controllers connected to JOC Cockpit. Permissions that should be applicable to a Specific Controller only can be added to a role. This can be achieved from the Roles view:

Image Modified

In the above screenshot, the Demoapplication_manager role is assigned a Specific Controller with ID testsuite from the listbox..

With the testsuite Controller being selected the role displays two links for default and testsuite Controllers like this:

...

In this configuration, the demoapplication_rolemanager role does is not yet have granted any permissions specific to the Controller ID controller2.2.0. At least testsuite. A minimum of one permission needs has to be added before the controller2.2.0 - demo_role configuration will be stored persistently.The interaction of default Controller permissions and Controller specific permissions within the same role is illustrated as follows.:

• default permissions:
  • sos:products:controller:view
  Controller-specific
• permissionsPermissions for a Specific Controller such as testsuite:
  • sos:products:controller:agents:view

The Dashboard view for all Controllers will The JS7 - Dashboardoffers to switch between connected Controllers and to display the status of Agents registered with the current Controller but the status of Agent Clusters will only be displayed for the specified Controller - in this case for Controller ID controller2.2.0. 

Folder Permissions

Folder Selection

...

respective Controller. This requires that the above view permission for the Controller is in place.

Assign Folder Permissions

Inventory folders can be

Image Removed

Explanation:

• x

Folders are selected from a tree view that is opened by clicking the folder icon, see screenshot.

Manage Folder Permissions

Folders are used to restrict access to objects such as workflows and schedules. For example, user accounts can be limited restricted to access objects for particular mandators / clients only.

By default permissions are granted for all any folders. However, roles can limit access to specific folders.

This is achieved by adding a folder permissionpermissions, i.e. a set of permissions to view the content of a specific folder only. With a folder permission permissions being in place the permission to access any other folders is automatically revokeddenied. If Should folder permissions should be used for applied to a number of folders then each folder permission has to be specified added individually to the given role.

Add Folder

...

Folder permissions are granted from the Permissions sub-view. Note that before folder permissions can be assigned a role, the role has to be specified for a user account. In the below example, a test user account and demo_role role have been configured and the demo folder has been created in the inventory.

To open the Permissions sub-view for a specific role, first open the Manage Identity Services page for the respective Identity Service, switch to the Roles sub-view and select the role that should be assigned folder permissions. For assignment click the name of the role in the list of roles.

...

Inventory folders are added by use of the Add Folder button visible in the upper right corner of the Graphical Permissions View and the Textual Permissions View of the respective role like this :

Image Added

Explanation:

• Folders are selected from a tree view that is opened by clicking the folder input field.
• The Recursive option grants access to any sub-folders of the selected inventory folder.

Check the Recursive checkbox in the Add Folder popup window if recursive access to sub-folders is required and click the Submit button.

Any user account that is assigned the demo_role will be able to access scheduling objects in the demo folder only.

Note that the test user account will be able to log in to the JOC Cockpit without being assigned a role, however, no menu items and no functionality is offered from the GUI. A minimum permission is required e.g. by a role that grants the following permission:

• sos:products:controller:view