Privilege Examples for Environment Tasks

Audience: On-premise.

This topic provides examples of environment tasks and the privileges required to complete them for a managed administrator like Robin (who is a user with Managed Administration product access and the Remote Administration user privilege) and a primary administrator like Ken (a user with the same product access and privileges as Robin, but who also has full administrative access to the production environment). These product access types and privileges are granted in SBM Application Administrator.

A global administrator, who is someone who has Regular User product access and the Remote Administration privilege granted in SBM Application Administrator, can perform most of the tasks below without additional privileges in either SBM Application Repository and SBM Application Administrator. For details on types of SBM administrators, refer to the SBM Application Administrator Guide.

Note: The examples below indicate the minimum set of privileges users need to perform the described tasks. Users will generally need additional privileges to use the system effectively.

Creating an Environment

Robin decides the team needs a staging environment so that users can test and accept changes to process apps. She follows the steps outlined in SBM Installation and Configuration Guide to install the SBM Application Engine component on a separate server machine and configure a database for the staging environment.

This requires Robin to log in to SBM Application Repository and create a new environment called "Staging" that uses the newly installed SBM Application Engine component.

Table 1. Robin's Required Privileges

Privilege Type	Privileges	Granted in
Deployment	Create, Edit, and Delete Environments for This Host	SBM Application Administrator for the destination environment

Promoting a Process App Snapshot

Development testing is complete on the Issue Tracking process app, and Robin promotes the process app snapshot from the test environment to the staging environment. Robin first creates a process app snapshot in the testing environment. She then promotes it to the staging environment.

Note: Promotion is the process by which administrators replicate a process app from one environment to another. After testing, for example, the process app might be ready to be used for real work.

Table 2. Robin's Required Privileges

Privilege Type	Privileges	Granted in
Repository	Deploy (for the process app being promoted)	SBM Application Repository
Deployment (source environment)	Export Process Apps From This Host	SBM Application Administrator
Deployment (destination environment)	Deploy Process Apps to This Host Export Process Apps from This Host	SBM Application Administrator

Promoting a Process App Snapshot into Production

User acceptance testing is complete in the staging environment and the Issue Tracking process app is ready for use in production. Ken, a primary administrator with full access to the production environment, first creates a process app snapshot in the staging environment. He then promotes it to the production environment.

Table 3. Ken's Privilege Requirements

Privilege Type	Privileges	Granted in
Repository	Deploy (for the process app being promoted)	SBM Application Repository
Deployment (staging environment)	Export Process Apps From This Host	SBM Application Administrator
Deployment (production environment)	Deploy Process Apps to This Host Export Process Apps from This Host	SBM Application Administrator

Deleting a Process App From the Repository

Robin notices that many test process apps are stored in the repository. She would like to delete those that are no longer used. Robin understands that by deleting the process apps, they will no longer be available in the repository and can no longer be deployed to a runtime environment. She also knows that deleting the process apps from the repository will not remove them from any runtime environments until she undeploys them.

Robin logs into the SBM Application Repository and deletes the process app from the Process Apps tab.

Privilege Type	Privileges	Granted in
Repository	Delete Process Apps Delete Application/Orchestration	SBM Application Repository

Undeploying a Process App

After Robin deletes the test process apps from the repository, she decides to clean up the runtime test environment and remove some of the deployed process apps that were used for testing. To remove these process apps from the runtime environment, she needs to undeploy them. She realizes that she will be permanently removing data, such as primary items and projects, but decides that it's appropriate to remove this unused data from the test environment.

Robin logs in to the SBM Application Repository and undeploys the process app from the Deployed Process Apps tab for the test environment.

Table 4. Robin's Required Privileges

Privilege Type	Privileges	Granted in
Deployment	Delete Process Apps for This Host	SBM Application Administrator