Create and Manage Roles
Roles control privileges within ALM. To access the Role page, click Personnel in the left-hand menu and then click Roles.
Default Roles Provided by ALM
ALM supplies several default Roles, as in the following table, that your organization may find adequate or may use as models for its own Roles development.
Like ALM Groups, ALM Roles do not overlap with roles in Active Directory or other directory systems.
Default ALM Role | Permissions |
---|---|
Account Owner | Read managed Account |
Provision Requester | Request a new Account |
Provision Approver | Approve Requests |
System Administrator | Authorize all Role types |
Create Workflow Templates | |
Set up ALM Engines | |
Perform ALM Integration with Active Directory | |
Perform ALM Integration with Secret Server |
Create Custom Roles
You can create custom Roles to further control access within ALM. To create a new Role
- Click Create Role in the upper right-hand corner of the Role page.
- Enter a Name for the new Role and click Add to bring up the Manage Role page.
- Click Add to bring up the Manage Role page.
- From the Manage Role page, select the Permissions tab. Assign permissions to the Role by checking the boxes next to the privileges the Role should have within ALM. Settings will update as you check the boxes. You do not need to click apply or save.
-
Select the Users tab and click Add user to bring up a list of available Users. Check the boxes next to the Users to assign to the Role and click Add.
-
On the Groups tab, click Add group to bring up a list of available Groups. Check the boxes next to the Groups that should include the Role and click Add.
Manage Roles
Open the Role Details page for any role by clicking on the name of the Role to be managed.
If you cannot find the Role you wish to manage, you may be viewing only enabled Roles. To filter Roles by All/Enabled/Disabled, click the Status drop-down and select the correct option.
Click Edit on any Role Details page (Permissions, Users, and Groups) to edit any of the available values on those pages. Click Save when complete.
Edit Role Permissions
- On the Permissions tab, assign permissions to the Role by checking the boxes next to the privileges the Role should have within ALM. Settings will update as you check the boxes. You will not need to click apply or save.
Enable/Disable Role
- Use the toggle on the right side of the screen to enable/disable the Role. Disabling will not delete the Role. Enabling the role will restore permissions to the Users with this role.
Edit Users
- On the Users tab, assign users to the Role by checking the boxes next to the users that will be assigned to the role. Then, click Add.
To remove a user from the role, click Remove next to that user in the list.
Edit Groups
On the Groups tab, click Add Groups. At the Add Groups modal, assign groups to the Role by checking the boxes next to the groups that will be assigned to the role. Then, click Add Groups.
To remove a group from the role, click Remove next to that group in the list.