How to give access to order jobs without giving access to modify folders

Everything about Control-M Enterprise Manager Server installation or setup.
Post Reply
User avatar
brownbag
Nouveau
Nouveau
Posts: 161
Joined: 11 Oct 2007 12:00
Location: Melbourne

How to give access to order jobs without giving access to modify folders

Post by brownbag » 21 Sep 2016 11:23

I've found in EM authorisations (in various versions up to v9) that I need to enable an em user/group to order jobs or folders, I need to provide give the user/group Update access to the relevant folder(s) in the 'Folders' tab in EM Authorisations . Yet this provides access to make changes to folders (create/modify and check-in but not delete).

These are two totally separate functions. You should be able to give somebody access to order (which doesn't change job definitions) without giving access to modify folders. It seems to be a clear design flaw in the EM authorisations.

Has anybody found a way around this?

User avatar
brownbag
Nouveau
Nouveau
Posts: 161
Joined: 11 Oct 2007 12:00
Location: Melbourne

Re: How to give access to order jobs without giving access to modify folders

Post by brownbag » 21 Sep 2016 11:44

This can be closed admins. I have an answer. Cheers.

User avatar
Jean-Mi
Nouveau
Nouveau
Posts: 19
Joined: 08 Sep 2006 12:00
Contact:

Re: How to give access to order jobs without giving access to modify folders

Post by Jean-Mi » 04 Oct 2016 10:54

Hi,

Can you share your solution?

I have the same problem.

Thanks,
Jean-Michel.

User avatar
brownbag
Nouveau
Nouveau
Posts: 161
Joined: 11 Oct 2007 12:00
Location: Melbourne

Re: How to give access to order jobs without giving access to modify folders

Post by brownbag » 04 Oct 2016 11:16

Yes, the solution is to modify the EM system parameter Action_OrderForce_AuthLevel. Default is "UPDATE_ACCESS" which means that only users with update access can order jobs. Change it to "BROWSE_ACCESS" and then users with browse access will be able to order jobs.

Post Reply