Manage Users and Roles in ManageEngine IT360

This section deals with the Access Controls inbuilt in IT360. This is achieved by creating different types of Users and Roles, and then associating the Users with Roles. The Users and Roles for the Professional Edition and the Enterprise Edition is the same while for the MSP Edition it is slightly different and hence dealt in a separate sub-section here.

IT360 offers a number of predefined Users and Roles. In addition, you may also create your own custom Users and Roles. Also, you have the option of importing Users from Active Directory.

Professional Edition and Enterprise Edition [Both Central Server and Probes - Users and Roles]

Role Management in Professional Edition and Enterprise Edition Central Server & Probe:

The following table gives the list of Roles supported by the Professional and Enterprise Editions, in default. In addition, you may also create your own Custom Roles and associate the same with the Users.

Roles Description of the Role
Administrator Role This role allows the admin to assign user to have unlimited administrative access to all the network devices, applications, servers and bandwidth monitors configured inside IT360. He has complete access over Networks, Servers, Applications and Traffic modules of IT360. When logged into ServiceDesk, the role assigned is that of a Technician.
Guest Role This role has guest access, that is, a Read Only access to all the modules of IT360 with Requestor Role in ServiceDesk.
NetworkAdministrator This role allows the user to have unlimited administrative access to all the network devices, and bandwidth monitors configured inside IT360. He has complete access over Networks and Traffic modules of IT360. When logged into ServiceDesk, the role assigned is that of a Technician.
NetworkOperator This role allows the admin to assign user to have restricted access to all the network devices and bandwidth monitors configured inside IT360 as assigned by Admin. He has access over Networks and Traffic modules of IT360. When logged into ServiceDesk, the role assigned is that of a Technician.
System and Applications Administrator This role allows the admin to assign user to have unlimited administrative access to all the servers and application monitors configured inside IT360. He has complete access over Servers and Applications modules of IT360. When logged into ServiceDesk, the role assigned is that of a Technician.
SystemOperator This role allows the admin to assign user to have restricted access to all the network devices, servers and application monitors configured inside IT360 as assigned by Admin. He has access over Networks, Servers and Applications modules of IT360. When logged into ServiceDesk, the role assigned is that of a Technician.
ITAdministrator This role the admin to assign user to have unlimited administrative access to all the network devices, applications, servers and bandwidth monitors configured inside IT360. He has complete access over Networks, Servers, Applications and Traffic modules of IT360. When logged into ServiceDesk, the role assigned is that of a Technician, Reporter, POApprover and ChangeManager.
Operator Role This role allows the admin to assign user to have limited administrative access to the various modules (Networks, Servers, Applications, Traffic) inside IT360. The role allows the user to view specific components/business service as assigned by Admin. When logged into ServiceDesk the role assigned is that of a Requestor.
HelpDeskTechnician To know more about HelpDesk Technician, click here. [ this Role is applicable to Professional Edition and Central Server of Enterprise Edition alone and is NOT relevant / applicable to the Probe of Enterprise Edition]
HelpDeskRequestor To know more about HelpDesk Requestor, click here. [ this Role is applicable to Professional Edition and Central Server of Enterprise Edition alone and is NOT relevant / applicable to the Probe of Enterprise Edition]
HelpDesk Non Login Technician

This role is purely internal to the Administrator to enable create a non login technician in helpdesk module. This role does NOT provide any access to any of the IT360 modules [not even the helpdesk module].

[ this Role is applicable to Professional Edition and Central Server of Enterprise Edition alone and is NOT relevant / applicable to the Probe of Enterprise Edition]

Note: The above mentioned pre-configured roles are not editable nor can the user delete the roles. The user can, if required, create more roles as per requirement. To know more about how to add/delete, manage users and roles in IT360, click here.

User Management in Professional Edition and Enterprise Edition Central Server & Probe:

The following table gives the default User types available in Professional and Enterprise Editions.

Users Description of the User
admin All users logging into IT360 as admin are given all the administrative privileges to work with the tool.
guest All users logging into IT360 as guest will have Read-Only access (by default) to all the business service created within IT360.
nwadmin All users logging into IT360 as nwadmin will have administrative privileges to the Networks and Traffic modules inside IT360. However, the user will not be able to access Servers and Applications modules within IT360.
nwoperator All users logging into IT360 as nwoperator, will have restricted access to the Networks and Traffic modules of IT360. The nwoperator will have access to only specific components of IT infrastructure as assigned by the Admin.
sysadmin All users logging into IT360 as sysadmin will have administrative access to Servers and Applications module inside IT360. However, the user will not be able to access Network and Traffic module within IT360. The user will have access to all the business services (by default) configured inside IT360.
sysoperator All users logging into IT360 as sysoperator will have restricted access to Networks, Servers and Applications module of IT360. The sysoperator will have access to only specific business service as assigned by the Admin.
itadmin All users logging into IT360 as itadmin will have administrative privileges to access business services and its monitors.
operatoruser All users logging into IT360 as operatoruser will have Read-Only access only to business services that are being assigned by the Admin.

Importing Users from Active Directory and assigning Roles:

You may also import Users directly from your Active Dirtectory and update / sync the same at predefined intervals. By default, these imported Users are assigned a [help desk] Requestor Role. You may change their Roles as required.

Creating Custom Users:

In addition to the defalut Users, IT360 allows you to create your own Users - a "Quick Wizard" kind of a feature where you may add a User and assign a Role instantaneously.

Using AD Authentication for logging into IT360:

You may also allow your login Users with various Roles to login using the AD Authentication mechanism. They can use their AD domain password to log into IT360. [Obviously, this works only for Users who are already imported from the AD into IT360 database. In case, if this feature does not work for a given User(s), try to sync / keep up-to-date, the AD Users with that of the IT360 database].

MSP Edition - Users and Roles:

Role Management in MSP Edition Central Server:

The following table gives the list of Roles supported by the MSP Edition, in default. In addition, you may also create your own Custom Roles and associate the same with the Users.

Roles Description of the Role
Administrator This role has Admin access accross all the modules configured inside IT360, with Technician role in ServiceDesk.

Power User

This role allows a user to have Read-Only access to all the components in all the modules of IT360, with Technician role in ServiceDesk.
Customer This role allows a user to have Read-Only access for the Selected Customer, with Requester role in ServiceDesk.
Operator

This role allows a user to have Read-Only access for the Selected BSGs or Selected Customer(s), with Technician role in ServiceDesk.

Note: In the case of Selected BSGs (Business Service Groups), all the BSGs created in IT360 will be listed. You can select the BSGs, for which that particular user should have privilege, from the list.

HelpDesk Technician This role has only Technician role, assigned in ServiceDesk module. To know more about HelpDesk Technician, click here. [This Role is applicable to MSP Edition - Central Server alone, and is Not relevant / applicable to the Probe Server - MSP Edition]
HelpDesk Requestor This role has only Requestor role, assigned in ServiceDesk module To know more about HelpDesk Requestor, click here.[This role is applicable to MSP Edition - Central Server alone, and is Not relevant / applicable to the Probe Server - MSP Edition]
HelpDesk Non Login Technician

This role is purely internal to the Administrator to enable create a non login technician in helpdesk module. This role does NOT provide any access to any of the IT360 modules [not even the helpdesk module].

[This role is applicable to MSP Edition - Central Server alone, and is Not relevant / applicable to the Probe Server - MSP Edition]

User Management in MSP Edition Central Server:

The following table gives the default User types available in the MSP Edition - Central Server.

Users Description of the User
admin All users logging into IT360 as admin are given all the administrative privileges to work with the tool.

Importing Users from Active Directory and assigning Roles:

You may also import Users directly from your Active Dirtectory and update / sync the same at predefined intervals. By default, these imported Users are assigned a [help desk] Requestor Role. You may change their Roles as required.

Creating Custom Users:

In addition to the defalut Users, IT360 allows you to create your own Users - a "Quick Wizard" kind of a feature where you may add a User and assign a Role instantaneously.

Using AD Authentication for logging into IT360:

You may also allow your login Users with various Roles to login using the AD Authentication mechanism. They can use their AD domain password to log into IT360. [Obviously, this works only for Users who are already imported from the AD into IT360 database. In case, if this feature does not work for a given User(s), try to sync / keep up-to-date, the AD Users with that of the IT360 database].

Role Managemenet in MSP Edition Probe:

Role Management is not applicable / relevant to MSP Probe, and this implies you do not have the option to create Custom Roles. However, the default Roles, that is, Administrator, Power User, Customer, Operator are available and can be used to associate when creating User(s).

User Management in MSP Edition Probe:

The following table gives the default User types available in the MSP Edition - Probe Server. In addition, IT360 allows you to create your own User Types via a 'Quick Wizard' kind of a feature, which allows you to add a User and assign a Role instantaneously.

Users Description of the User
admin All users logging into IT360 as admin are given all the administrative privileges to work with the tool.

Features related to Importing Users from AD and AD Authentication are not applicable / relevant to Users at the Probe level, and hence not discussed here.

A few important points on fine-grained configuration of Users and Roles for the service desk module

User and Role management in monitoring module of IT360 is exhaustive and sufficient from a monitoring perspective. The same takes effect in the service desk module also, with a Requestor Role or a Technician Role. However, in addition to this, the service desk module has its own Role Management and this offers customising the Technician Role to a very high level of granularity [enforced and applicable for its own ITIL modules]. So, in effect, you create a User / Role in the monitoring module of IT360 and then go to the service desk module to customise the Role further [if you feel that the Role requires a modified access or a higher level of granularity for its ITIL modules].

[TOP]



Copyright © 2013, ZOHO Corp. All Rights Reserved.