Granting or Denying Explicit Privileges to Users or Groups

Purpose

Follow this procedure when you want to grant or deny a privileges to users or groups, or to a role.

PRIVILEGES  Manage Privileges

NOTE  Administration privileges apply to all products in the base database. Product level privileges only apply to your currently selected product.

NOTE  When certain privilege or role assignments are updated in the Administration Console, the changes may not take effect during existing client sessions because of privilege caching. In this case, the user will need to restart the client session for the new privilege settings to apply. This behavior depends on variables that can be set in the dm.cfg file. For further details, see the System Administration Guide.

To grant or deny Privileges to Users or Groups

1. Do one of the following:

To grant or deny a privilege to one or more users or groups:

a    On the Privileges tab, click the Privileges button: on the toolbar.

b    In the navigation pane, select the category to which the privilege belongs from the list, Administration Privileges, or Product Level Privileges.

c     Expand the folder:  for the subcategory to which the privilege belongs in the navigation tree and select the privilege.

d    In the Explicit Grant/Deny Rules section of the content pane, click the  button and choose an option: Grant User, Deny User, Grant Group, Deny Group.

To grant or deny a user or group one or more privileges:

a    On the Privileges tab click the User button: .

b    In the navigation pane, select the category of users to which you want to grant or deny privileges from the list, All Active Users, All Groups, Auto Registered, or Dormant Users.

c     Select the user or group in the navigation pane.

d    In the content pane, locate the section corresponding to the object class or functional area for which you want to grant or deny privileges.

e    Click the   button in that area and choose an option: Grant or Deny.

2. Depending on the dialog box displayed, move the users or groups you want to be granted or denied into the Granted Users, Granted Groups, Denied Users, or Denied Groups list:

• To add a user/group, select the name in the Available Users/Groups to grant/deny list, and click the >> link to move it to the Granted/Denied Users/Groups list

• If you do not want to include a user/group, select the name in the Granted/Denied Users/Groups list, and click the << link.

3. For certain privileges related to deployment, options are displayed that enable you to grant or deny the privilege for a specific project or stream, deployment stage, or area. For details, see Granting or Denying Explicit Privileges for Deployment Functions.

4. Click OK to confirm the changes. A confirmation dialog box is displayed.

5. Click Yes to commit the changes.

To de-assign an explicit privilege rule for a privilege:

1. On the Privileges tab, click the Privileges button: on the toolbar.

2. In the navigation pane, select the category to which the privilege belongs from the list, Administration Privileges, or Product Level Privileges.

3. Expand the folder:  for the subcategory to which the privilege belongs in the navigation tree and select the privilege.

4. In the Explicit Grant/Deny Rules section of the content pane, select the User/Group and click the  button.

5. Click OK in the De-assign User/Group from Privilege Rule dialog box.I.

Related Topics

Grant/Deny Users Dialog Box

Grant/Deny Groups Dialog Box