Roles
The tasks a user of the DSMC has, depends on the user's role in the company. The "scope" of a role can vary from company to company.
For example, the HelpDesk personnel in a company attend
to problems on individual computers. Other employees package software
(packagers).
In order to map these "real" roles, you define corresponding
roles (e.g. the role of Packaging and the role of Helping).
Therefore you don't have to assign the right to execute a task to a specific user individually.
Instead, you assign a role to a user which contains the required rights.
A role combines several rights logically, i.e. according to the "real" roles in your company. The following example shows that roles and rights do not have to be assigned one-to-one.
You define the roles as you wish. You can determine how tasks are grouped together into roles. You can change role definitions any time or even add roles you have defined yourself.
Available Roles
The DSMC comes with a number of predefined roles.
These roles have the right to execute typical tasks for specific ranges.
The following table contains the predefined roles. You can create further,
user-defined roles.
The system role Read is an exception because this role only contains a single right, the Read right. The Read role is required to read configuration settings from system folders.
| Role | Description | Assigned Rights |
|---|---|---|
|
System role Supervisor |
The pre-defined role of Supervisor can perform all tasks. It cannot be changed or deleted. |
all |
|
System role Read |
The pre-defined role Read contains the right to read objects (Read access). This is especially important when reading configuration settings from system folders. |
System right Read |
|
System roles Open: ... |
The pre-defined roles Open: ... already include the right with the same name to open the respective area of the DSM Console. The following roles are available:
You can not assign these roles if you specify that Everyone has the right to open these areas via the ICDB setting Permission to Open the DSMC Views. Existing role assignments are no longer used then. |
System rights Open: ... |
|
Packaging Manager |
The Packaging Manager is responsible for a sector of the software library. |
System right Read Open: Software Library Use Software Manage Software Delete Software Manage SW Categories Delete SW Categories Manage SW Folders Delete SW Folders |
|
Quality Manager |
The Quality Manager can only assign packages for a pilot installation that have not been released yet or it can create policies for these packages. Also, it can release packages that have passed the test. |
System right Read Open: Software Library Manage Software Delete Software Use Software Release Software Use Unreleased Software Manage Policies |
|
Product Manager |
The Product Manager is responsible for assigning packages. |
System right Read Open: Software Library Use Software Manage Policies |
|
Helpdesk User |
The Helpdesk User can query both hardware and software
information as well as rollout information. |
System right Read Open: Software Library Use Software Edit Installation Targets Manage Policies Open Client Logfiles |
|
Client Manager |
The Client Manager creates and manages computers, users, groups and OU's. Furthermore it can execute all tasks of a Helpdesk User. |
System right Read Manage Users and Computers Delete Users and Computers Manage Groups Delete Groups Manage Group Members Manage Group Memberships Manage OUs Delete OUs Assign Roles Use Software Reinstall Computer Manage Policies |
|
Software Manager |
The Software Manager can release packages and query hardware and software information. |
System right Read Edit Installation Targets Open Client Logfiles |
|
Citrix Farm Manager |
The Citrix Farm Manager manages the organization structure, users and computers in a Citrix Server Farm, assigns and publishes software and requests status information. |
System right Read Manage OUs Delete OUs Manage Users and Computers Delete Users and Computers Manage Policies Use Software |
| Manage monitoring definitions | Someone with that role is allowed to manage monitoring definitions and reports. |
System right Read Manage Monitoring Definitions |
| Display Management Reports | Someone with that role is allowed to display management reports. |
System right Read Display Management Reports |
| View Infrastructure Monitoring | Someone with that role is allowed to display the infrastructure monitoring. |
System right Read View Infrastructure Monitoring |