Chapter 7 System Administration
Roles Manager
1
2
3
In the Manage Existing Portlets dialog box, click Shared to expand the category.
Click under the DELETE column that corresponds to the shared portlet you want to delete.
A confirmation message appears.
Click OK.
The portlet name no longer appears in the Add Content menu in the portal, and the portlet is no longer available to Teradata Viewpoint users. Existing instances of a shared portlet on a portal page remain on the page. However, a warning message appears if a user tries to access the portlet.
Roles Manager
Roles Manager
The Roles Manager portlet allows Teradata Viewpoint Administrators to assign permissions efficiently by creating classes of users called roles.
Teradata Viewpoint Administrators can perform the following tasks:
• Add and configure new roles
• Edit the configuration and settings of existing and default roles
• Copy roles, saving time in creating new roles
• Enable or disable portlets for a role.
• Delete roles that are no longer needed
About Roles
Teradata Viewpoint includes the following preconfigured roles:
Administrator This role has all permissions and can be assigned to any account. It is recommended that this role be used only by Teradata Viewpoint
Administrators.
User This role is assigned to every Teradata Viewpoint user and cannot be removed from Teradata Viewpoint. It is recommended that this role be set with minimum user permissions.
It is recommended that you configure new roles with partial permissions that are appropriate to all users in that role. Each role you create controls access to specific systems, portlets, metrics, preferences, and permissions in portlets.
Example Roles
The following examples show how roles can be defined to manage portlet usage and control permissions within Teradata Viewpoint.
50 Teradata Viewpoint User Guide
Chapter 7 System Administration
Roles Manager
AppDBA
The AppDBA role is defined for users that are application DBAs. The rewind feature and some portlets are enabled for this role so users can review graphs in the
PRODUCTIVITY portlet.
AcctDept
The AcctDept role is defined for all users in the Accounting Department. Some portlets are enabled for this role. These users are granted permissions so they can edit all calendar events in the CALENDAR portlet and access the MY QUERIES portlet to monitor their queries.
OpDBA
The OpDBA role is defined for users that are operations DBAs. The rewind feature and all portlets are enabled for this role so users can monitor performance trends. Users in the
OpDBA role access the WORKLOAD MONITOR portlet to track Teradata Database request arrivals and completions.
About the Roles Manager View
The Roles Manager view allows Teradata Viewpoint Administrators to manage roles efficiently, including assigning users to roles, and granting user permissions. After a role is created, you can customize the role using the following tabs:
General
Users
Enable or disable a role, and select the systems available to that role.
Search for users and add them to, or remove them from, the list of users assigned to the selected role.
Portlets Enable or disable portlets for a role. This tab can also be used to configure default settings per portlet, per role.
Metrics Select the metrics to display per metric, per system.
Permissions Configure permissions per system, per portlet, per role.
A hierarchy of permissions controls portlet behavior according to role. In order of precedence, permissions are configured on the Portlets tab, the General tab, and the
Permissions tab.
Note: Use the Portlet Library portlet to globally enable and disable access to portlets.
Adding a Role
This task describes how to add a role and assign one or more Teradata Database systems to the role.
1
From the Roles Manager view, click Add Role.
An Add role dialog box appears with the General tab selected (default).
Teradata Viewpoint User Guide 51
Chapter 7 System Administration
Roles Manager
52
2
3
4
5
6
Under Name, enter a new name for the role, up to 25 characters.
You can use alphanumeric characters and underscore (_), but no space.
Under Description, use the default or enter a new description, up to 255 characters.
[Optional] Under Role State, do one of the following:
• Leave the Role State as is.
• Select Enabled to enable the role for configuration and adding users, and activate the role for use with Teradata Viewpoint.
• Select Disabled to enable the role for configuration and adding users, but disable the role for use with Teradata Viewpoint.
[Optional] Under Rewind State, do one of the following:
• Leave the Rewind State as is.
• Select Enabled to grant permission to this role to use the rewind feature, when available.
• Select Disabled to deny permission for this role to use the rewind feature.
[Optional] Under Enable Systems For Role, do one of the following:
• Leave the currently selected Teradata Database systems as is.
• Select new Teradata Database systems the selected role is authorized to access.
• Click the Enable Systems For Role column heading to select all check boxes for the
Teradata Database systems.
Note: You can click the column heading again to clear all check boxes.
Editing a Role
This task describes how to edit a role. You cannot change the name of an existing role. To change the name, you must either add a new role or copy the role, and then change the role name.
1
From the Roles Manager view, select a role from the list.
A dialog box appears with the current information for the selected role.
Teradata Viewpoint User Guide
Chapter 7 System Administration
Roles Manager
2
3
4
5
Under Description, use the default or enter a new description, up to 255 characters.
[Optional] Under Role State, do one of the following:
• Leave the Role State as is.
• Select Enabled to enable the role for configuration and adding users, and activate the role for use with Teradata Viewpoint.
• Select Disabled to enable the role for configuration and adding users, but disable the role for use with Teradata Viewpoint.
[Optional] Under Rewind State, do one of the following:
• Leave the Rewind State as is.
• Select Enabled to grant permission to this role to use the rewind feature, when available.
• Select Disabled to deny permission for this role to use the rewind feature.
[Optional] Under Enable Systems For Role, do one of the following:
• Leave the currently selected Teradata Database systems as is.
• Select new Teradata Database systems the selected role is authorized to access.
• Click the Enable Systems For Role column heading to select all check boxes for the
Teradata Database systems.
Note: You can click the column heading again to clear all check boxes.
Copying a Role
When a role is copied, all settings on all tabs are inherited from the original role, except for the Name field on the General tab. When the Administrator role is copied, all information on all tabs is copied. However, the copied role does not have administrative privileges and does not have an Admin menu on the portal.
1
2
From the Roles Manager view, select a role from the list.
Click Copy Role.
A dialog box appears with the General tab selected.
Teradata Viewpoint User Guide 53
Chapter 7 System Administration
Roles Manager
54
3
4
5
6
7
Under Name, enter a new name for the role, up to 25 characters.
You can use alphanumeric characters and underscore (_), but no space.
Under Description, use the default or enter a new description, up to 255 characters.
[Optional] Under Role State, do one of the following:
• Leave the Role State as is.
• Select Enabled to enable the role for configuration and adding users, and activate the role for use with Teradata Viewpoint.
• Select Disabled to enable the role for configuration and adding users, but disable the role for use with Teradata Viewpoint.
[Optional] Under Rewind State, do one of the following:
• Leave the Rewind State as is.
• Select Enabled to grant permission to this role to use the rewind feature, when available.
• Select Disabled to deny permission for this role to use the rewind feature.
[Optional] Under Enable Systems For Role, do one of the following:
• Leave the currently selected Teradata Database systems as is.
• Select new Teradata Database systems the selected role is authorized to access.
• Click the Enable Systems For Role column heading to select all check boxes for the
Teradata Database systems.
Note: You can click the column heading again to clear all check boxes.
Deleting a Role
This task describes how to delete a role. After a role is deleted, it cannot be restored. This action affects all users assigned to the role.
1
2
From the Roles Manager view, select a role from the list.
Click Delete Role.
Teradata Viewpoint User Guide
Chapter 7 System Administration
Roles Manager
3
A confirmation message appears.
Click OK.
The deleted role is removed from the list.
Assigning Users to a Role
This topic describes how to search for users and assign them to a role.
Note: If auto-provisioning is in use, a default role is automatically assigned to new users the first time they log on. User is generally the default assignment.
1
2
3
From the Roles Manager view, select a role from the list.
Click the Users tab.
The users list appears and includes two panes. The left pane lists all Teradata Viewpoint system users. The right pane lists users already assigned to the selected role. In the left pane, the names of users already assigned to the selected role are dimmed.
[Optional] Search for a user: a
Select a filter from the list.
4
5
6 b
In the contains field, enter the search criteria.
c
Click Find.
The AVAILABLE USERS list displays only users meeting the search criteria.
Select one or more users from the left pane.
Note: You can select multiple users by holding the CTRL key and clicking additional names.
Click .
The selected users are assigned to the role. Selected user names are copied to the right pane and are dimmed in the left pane.
Click Apply.
Removing Users from a Role
This topic describes how to remove users from a role.
1
2
From the Roles Manager view, select a role from the list.
Click the Users tab.
Teradata Viewpoint User Guide 55
Chapter 7 System Administration
Roles Manager
The users list appears and includes two panes. The left pane lists all Teradata Viewpoint system users. The right pane lists users already assigned to the selected role. In the left pane, the names of users already assigned to the selected role are dimmed.
56
3
4
5
Select one or more users from the right pane.
Note: You can select multiple users by holding the CRTL key and clicking additional names.
Click .
The selected users are removed from the role. The names no longer appear in the right pane and are no longer dimmed in the left pane.
Click Apply.
Enabling Portlets for a Role
This task describes how to enable Teradata Viewpoint portlets for a role. Portlets enabled using the Roles Manager portlet are the default portlets available for all users assigned to the selected role.
1
2
From the Roles Manager view, select a role from the list.
Click the Portlets tab.
A dialog box appears displaying the portlet categories.
Teradata Viewpoint User Guide
Chapter 7 System Administration
Roles Manager
3
4
5
Click a name to expand a category and display the available portlets.
For the selected role, select the portlets to enable in each category.
Click the ENABLE FOR ROLE column heading to enable the role for all portlets. Click the column heading again to clear all check boxes. Enabling a portlet in the Roles
Manager view, Portlets tab, includes the portlet in the Teradata Viewpoint Add
Content menu for all role-assigned users.
Click Apply.
Configuring Default Portlet Settings
This topic describes how to configure default portlet settings for a role.
Note: Shared portlets are preconfigured using an instance of a portlet and cannot be configured using the Roles Manager portlet.
1
2
From the Roles Manager view, select a role from the list.
Click the Portlets tab.
A dialog box appears displaying the portlet categories.
Teradata Viewpoint User Guide 57
Chapter 7 System Administration
Roles Manager
58
3
4
5
Click a name to expand a category and display the available portlets.
Configure defaults for each portlet as follows: a Click for the portlet you want to configure.
The CONFIG view for the corresponding portlet appears.
Note: Configuration defaults entered in the CONFIG view only apply to the role being configured. If a user is assigned to multiple roles, the role with the highest priority determines which settings are applied to every instance of the portlet added to a portal page. For example, if a user is assigned the roles of Administrator then
User, the Administrator settings apply to each instance of the portlet. Also, Teradata
Viewpoint Administrators can grant users permission to set preferences for a subset of the available settings as long as user preferences are not disabled.
b
Follow the instructions in the preferences-related topics provided for each portlet in
Teradata Viewpoint Help.
Click Apply.
Granting Metric Permissions for a Role
This topic describes how to grant permissions for metrics by role. The metric permissions granted to a role apply to the following portlets only:
• CAPACITY HEATMAP
Teradata Viewpoint User Guide
Chapter 7 System Administration
Roles Manager
• METRICS ANALYSIS
• METRICS GRAPH
• TODAYS STATISTICS
1
2
From the Roles Manager view, select a role from the list.
Click the Metrics tab.
A dialog box appears displaying the metrics categories and each Teradata Database system name.
3
4
Select the metrics for each available Teradata Database system that you want users in the selected role to see by doing any of the following:
• Click Select All to select every option on every system.
Select All becomes Clear All.
• Click Clear All to deselect every option on every system.
Clear All becomes Select All.
• Click the top check box in a column to select or clear all check boxes for a category for all systems.
• Click the system name at the left of the row to select or clear all check boxes for that system.
• Click a check box to select or clear that category for that system.
Click Apply.
Granting Portlet Permissions for a Role
This topic describes how to enable specific features of a portlet by system and role.
1
2
3
From the Roles Manager view, select a role from the list.
Click the Permissions tab.
Select a portlet from the Select portlet list.
The Permissions dialog box displays a list of the available systems and options.
Teradata Viewpoint User Guide 59
