Appendix B - Role privileges

The role privileges are listed in the WEB section of the Object security tab.

APPENDIX_Role.png

The following sections compare the default privileges of the two predefined roles License administrators and Viewers.

Also, examples are given on required privileges for certain user access levels.

Admin privileges

Object security

Gives access to

License admins

Viewers

Access to import license assignments

The License assignment import task in the Import data view

X

-

Access to import MLS file manually

The MLS import task in the Import data view

X

-

Access to import of agreements

The Agreement import task in the Import data view

X

-

Access to import of license data

The License import task in the Import data view

X

-

Access to the file import page

The Import data view

X

-

Administer application blacklist

The Application blacklist task in the Administration overview

X

-

Administer application exclusions

The Compliance exclusions view.

X

-

Administer license policy definition

The License policy task in the Administration overview

X

-

View manufacturers and vendors

The Manufacturers and vendors task in the Administration overview. Also, the basic setting USE_VENDOR_REPOSITORY must be enabled in Snow MACC.

X

-

Agreement privileges

Object security

Gives access to

License admins

Viewers

Access to agreement documents

The Documents tab in Agreement details

X

-

Access to agreement reports main page

The Agreement reports view

X

X

Add/edit/delete agreements

Possibility to add a new agreement, or to edit or delete an existing one

X

-

Alert - Expired contracts

The Agreements have expired alert

X

X

Alert - Expiring contracts

The Agreements are about to expire alert

X

X

Edit custom agreement types

The Custom agreement types view, and the possibility to add new or edit existing agreement types.

X

-

Application privileges

Object security

Gives access to

License admins

Viewers

Access to Application Family details

The Application Family details view

X

X

Access to Application Manufacturer details

The Manufacturer details view

X

X

Access to application reports main page

The Application reports view

X

X

Access to Tracking for compliance

The Tracking sub-tab of the Licenses tab in application details

X

-

Access to Trending for compliance

The Trends sub-tab of the Compliance tab in application details

X

-

Add/edit application information

Possibility to add or edit the information of an application

X

-

Alert - Application nearing End of extended support

The Application nearing End of extended support alert

X

-

Alert - Application nearing End of life

The Application nearing End of life alert

X

-

Alert - Application nearing End of support

The Application nearing End of support alert

X

-

Alert - Applications with user rights

The Applications with registered rights alert

X

X

Alert - Installed blacklisted applications

The Blacklisted applications alert

X

X

Alert - Recently installed applications

The New installations alert

X

X

Alert - Unused applications

The Applications without registered usage alert

X

X

Change application licensing information

The License settings tab and the Downgrade paths tab in edit application view

X

-

Edit application bundle options

The Bundle options tab in edit application view

X

-

Cloud privileges

Object security

Gives access to

License admins

Viewers

Access to cloud reports main page

The Cloud reports view

X

X

Access to Generic SaaS information

The SaaS overview view

X

X

Access to Microsoft Office 365 information

The Microsoft Office 365 view

X

X

Edit/Delete Generic SaaS subscription costs

Possibility to edit or delete existing subscription costs for Generic SaaS

X

-

Edit/delete Microsoft Office 365 subscription costs

Possibility to edit or delete existing subscription costs for Microsoft Office 365

X

-

Computer privileges

Object security

Gives access to

License admins

Viewers

Access to computer reports main page

The Computer reports view

X

X

Alert - Active computers in the database

The Active computers alert

X

X

Alert - Cloud servers that are not inventoried

The Cloud servers that are not inventoried alert

X

-

Alert - Computers that are not inventoried

The Computers that are not inventoried alert

X

X

Alert - Computers with IBM applications without PVU

The Computers with IBM PVU-based products installed without data from ILMT alert

X

X

Alert - Computer with less than X GB total disk space installed

The Installed computer disk space alert

X

X

Alert - Computer with less than X MB system disk space available

The Available system disk space alert

X

X

Alert - Computer with less than X MB system memory installed

The Installed computer memory alert

X

X

Alert - Computers not inventoried in X days

The Active computers inventory status alert

X

X

Alert - Inactive computers inventoried within the last X days

The Inactive computers alert

X

X

Alert - Oracle computer models without mapped physical socket capacity

The Oracle computer models without mapped physical socket capacity alert

X

X

Alert - Quarantined computers in the database

The Quarantined computers alert

X

X

Alert - Quarantined devices in the database

The Quarantined devices alert

X

X

Alert - Virtual machines without locally installed inventory client

The Virtual machines without locally installed inventory client alert

X

X

Edit datacenters and clusters

Possibility to edit an existing datacenter/cluster

X

-

Edit/delete computers

Possibility to edit or delete an existing computer

X

-

Edit/delete devices

Possibility to edit or delete an existing device

X

-

List devices

The List all devices view

X

X

View datacenters and clusters

The Datacenters and clusters view

X

X

Custom objects privileges

Object security

Gives access to

License admins

Viewers

Access to object reports

Reports related to objects in the Reports view, when the category “Object reports” is selected. Also, the reports must be given access to via Report Security.

X

-

Global privileges

Object security

Gives access to

License admins

Viewers

Access to the License Manager Web application

Login access to the Web user interface of Snow License Manager

X

X

License privileges

Object security

Gives access to

License admins

Viewers

Access to license documents

The Documents tab in License details

X

X

Access to license reports main page

The License reports view

X

X

Add/edit/delete licenses

Possibility to add a new license, or edit or delete an existing one

X

-

Alert - Expiring licenses

The Expiring licenses alert

X

X

Alert - Expiring subscription licenses

The Expiring subscription licenses alert

X

X

Alert - Incomplete licenses

The Incomplete licenses alert

X

X

Alert - Invalid extended coverage

The Extended license coverage is invalid alert

X

X

Alert - Invalid extended license dcc coverage

The Datacenter extended license coverage is invalid alert

X

X

Alert - Invalid named licenses

The Invalid named licenses alert

X

X

Alert - Licenses not using PVU metric for PVU metered applications

The Licenses not using PVU metric for PVU metered applications alert

X

X

Alert - Overlicensed applications

The Overlicensed applications alert

X

X

Alert - Unassigned licenses

The Unassigned licenses alert

X

X

Alert - Underlicensed applications

The Underlicensed applications alert

X

X

View license information

The views Licenses overview, Search for licenses, List all licenses, License details, and License reports

X

X

Main menu privileges

Object security

Gives access to

License admins

Viewers

Access to the main menu for administration

The Administration menu

X

-

Access to the main menu for agreements

The Agreements menu

X

X

Access to the main menu for applications

The Applications menu

X

X

Access to the main menu for Cloud services

The Cloud menu

X

X

Access to the main menu for computers

The Computers menu

X

X

Access to the main menu for custom objects

The Objects menu

X

X

Access to the main menu for licenses

The Licenses menu

X

X

Access to the main menu for mobile devices

The views Search for mobile devices, List all mobile devices, and Mobile device details

X

X

Access to the main menu for users

The Users menu

X

X

Access to view software usage data

Data related to usage in application details, computer details, and user details.

X

X

Mobile device privileges

Object security

Gives access to

License admins

Viewers

Access to Mobile device reports main page

Reports related to mobile devices in the Reports view, when the category “Mobile devices” is selected. Also, the reports must be given access to via Report Security.

X

X

Edit/delete mobile devices

Possibility to edit or delete an existing mobile device

X

-

System privileges

Object security

Gives access to

License admins

Viewers

Allowed to change user settings

User Settings for the system

X

X

Allowed to save reports and searches

The Save report option in the report detail views

The Save search option in the Search for applications/computers/users/agreements/licenses/objects views

X

X

Allowed to share reports

The Share report option in the detail views of the user’s own reports

X

X

User privileges

Object security

Gives access to

License admins

Viewers

Access to user reports main page

The User reports view

X

X

Alert - Quarantined users in the database

The Quarantined users alert

X

X

Alert - Used blacklisted applications

The Used blacklisted applications alert

X

X

Alert - User without application rights

The Unregistered users using applications that require registered usage rights alert

X

X

Assign application user rights to users

The Application rights tab in the edit user view

X

-

Edit/delete users

Possibility to edit or delete an existing user

X

-

View usernames

Usernames in plain text (that is, no anonymization of usernames)

X

X

Example: Access to a specific report

In this example, a user needs access to the report All agreements in Snow License Manager. The tables show the privileges that must be granted to the role assigned to the user.

Table 7. Privileges on the Object security tab

Section

Access

WEB|GLOBAL

Access to the License Manager Web application

WEB|AGREEMENT

Access to agreement reports main page

WEB|MAIN MENU

Access to the main menu for agreements



Example: Access blacklist functionality and reports

In this example, a user needs to be able to blacklist applications and see related reports. The tables show the privileges that must be granted to the role assigned to the user.

Table 8. Privileges on the Object security tab

Section

Access

WEB | ADMIN

Administer application blacklist

WEB | APPLICATION

Access to application reports main page

Add/edit application information

Alert - Installed blacklisted applications

Alert - Installed non-whitelisted applications

WEB | COMPUTER

Access to computer reports main page

WEB | GLOBAL

Access to the License Manager Web application

WEB | MAIN MENU

Access to the main menu for administration

Access to the main menu for applications

Access to the main menu for computers

WEB | USER

Access to user reports main page

Alert - Used blacklisted applications

View usernames



Table 9. Privileges on the Report security tab

Access

Blacklisted applications per computer

Blacklisted applications per user



Example: Access to Microsoft Office 365 information including reports

In this example, a user needs to be able to see Microsoft Office 365 information and related reports. The tables show the privileges that must be granted to the role assigned to the user.

Table 10. Privileges on the Object security tab

Section

Access

WEB|GLOBAL

Access to the License Manager Web application

WEB|CLOUD

Access to Microsoft Office 365 information

WEB|MAIN MENU

Access to the main menu for Cloud services



Table 11. Privileges on the Report security tab

Access

Microsoft Office 365 Subscription plans cost

Microsoft Office 365 user activity and cost per subscription plan