<< Click here to display Table of Contents >>

Configuring Share Policy

Contents

Share Policy refers to the mechanism of authorizing roles and privileges to all users within a tenant. Users can access multiple domains concurrently with different roles assigned.

1.Log into Domain Management page.

2.In the Domain Management page, click Share Policy on the Start Page or click Operations > Share Policy from the quick access toolbar. The Share Policy tab lists all users who have access to the current tenant.

3.Select a user to assign domain access and more privileges by role.

4.Click Apply.

The system provides the following pre-defined roles, and the default privileges of each role are listed as follows:

Privileges	Explanation	Domain Admin	Power User	Engineer	Guest	Network Change Creator	Network Change Executor	Network Change Approver
Domain Management	Log into the Domain Management page and do the following domain management tasks: ▪View, export, and delete discovery report in the Domain Manager ▪Add network definition ▪View, add, modify, delete, and disable topology links in the Topology Link Manager ▪Resolve duplicated IPs and subnets in the Duplicated IP and Subnet Manager ▪Add checkpoint OPSEC tasks in the Checkpoint OPSEC Manager ▪Configure network security settings and minimum subnet mask in L2 topology building ▪Configure a desktop profile for all users under a domain	√	√			√	√	√
Share Policy Management	▪Configure share policy (assign domain access and privileges to other users in this domain)	√
Device Management	▪Add, modify, and remove MPLS cloud ▪Remove devices from a domain	√	√			√	√	√
Site Management	▪Add MPLS clouds and unclassified network devices from the Domain Manager to a site ▪Open the Site Manager to do site management, such as creating, editing, deleting, importing, committing, and rebuilding sites	√	√			√	√	√
Discover/Tune Network Device	▪Create a do-not-scan list ▪Add discovery tasks from the Start Page or the Schedule Task page ▪Rediscover selected IPs and devices in the Domain Manager ▪Tune live access ▪Run on-demand discoveries	√	√			√	√	√
Schedule Benchmark	▪Add benchmark tasks from the Start Page or the Schedule Task page	√	√			√	√	√
Manage Network Settings	▪Configure and manage shared network settings	√	√			√	√	√
Manage Device Settings	▪Configure and manage shared device settings for each device in a domain from the following entries: oSite pane oMap oDomain Manager oDiscover oTune Live Access	√	√	√		√	√	√
Access to Live Network	Download the shared network settings or device settings data from the server and use these data to retrieve live device data from the network, which includes: ▪Run CLI commands and Qapps on a map page or in a runbook ▪Run monitor (Qapp-based) widgets and retrieve live data in static widgets in a dashboard ▪Retrieve variables once or monitor variables periodically from the live network in Instant Qapp ▪Calculate live paths (use the live network as the data source) ▪Configure SNMP, CLI timeout, SNMP hostname trim rules, management interface selection order, and live access method polling order (SNMP/Telnet/SSH/Jumpbox) ▪Browse live access logs in the Domain Manager	√	√	√	√	√	√	√
Create Network Change	Create network change tasks	√	√			√
Execute Network Change	Execute network change tasks	√	√				√
Approve Network Change	Approve network change tasks	√						√
View Network Change	View network change tasks	√	√			√	√	√
Map Layout Management	Associate layout styles with site maps and shared device group maps	√	√			√	√	√
Qapp Scheduler Management	Schedule Qapps or Gapps to monitor networks	√	√	√		√	√	√
Shared Resource Management	Only system/tenant administrator can edit built-in files in the shared folder of Device Group, Qapp, Gapp, Parser, Dashboard Widget and Template, and Runbook Template	√	√	√		√	√	√
Variable Mapping Management	View and manage variable mappings	√	√			√	√	√