Objective: Provide the necessary steps to scope a user to only see one or more services in Live Maps.
There are a couple different types of dashboards and how to set the permissions can be different. You may need to look at some of these other KB articles for the various dashboards.
NOTES: Currently there is an option to select services and save them directly from the Live Maps Authoring console. However this doesn’t always set all the necessary permissions if you want to see all of the sub-dashboards. this KB article will go thru setting the permissions directly from the User Roles in SCOM to give you complete coverage so it can be done in one location. This KB article will walk through scoping out the “Order Entry” Service.
1. Open up the SCOM Console, and navigate to Administration > Security > User Roles.
At this point you can either create a new user role, or edit a current one. The type of User Role is important in the level of access a user will have. Example – Read-only users can see alerts, but not edit them. Operators do have the ability to edit alerts. We do not override the inherent permissions given to a user via SCOM. If you are unsure of the type of Role, it is best you familiarize yourself with the User Roles in SCOM – https://technet.microsoft.com/en-us/library/hh872885(v=sc.12).aspx
2. Double click on the user role if you are editing an existing one.
At this point you can add any users or groups you wish, or leave that for later.
Next we need to cover what is needed from the “Group Scope” and “Dashboards and Views” Tabs. It is the difference to having permissions to a group and actually being able to view the group.
Group Scope Tab – This give the user access to see the health state of the dashboard and the objects contained in the dashboard.
3. Click on the Group Scope Tab. Since it assumed you only want them to have access, you need to give them access to the following groups first.
- All Live Maps Licenses
- Live Maps Portal Group
- Or a restricted Live Maps group as detailed out in the KB article. This may be useful if you are really trying to scope down what people see in different areas of Live Maps.
Next, go through the Tree and find the name of your service. This will be an group that is NOT expanded out into any sub-folders.
Next scroll up and down till you find these 3 sections.
- All Live Maps Service Application Perspectives
- All Live Maps Service End User Perspectives
- All Live Maps Service Infrastructure Perspectives
In each one, if it is not already expanded, click on the “+” to expand the listing. Find the perspective component group for your Service. They will all have the following naming convention. <Perspective> Components (<Name of Service>). In the example below it is the “Application Components (Order Entry)”. There will also be an “End User Components (Order Entry)” and “Infrastructure (Order Entry)”.
Once you are done with adding the groups, click on the Dashboards and Views. Note this always takes a moment in SCOM. Basically it will start reading the folder structure in SCOM to find any views.
It is assumed that you are going to be scoping this to only certain services, so make sure “Only the dashboards and views selected in each tab are approved” is selected.
Next navigate through the folder structure to Live Maps\Services\<name of service> Is visible. In this example, we are navigating to the Order Entry Service.
Place a check mark into each of the Dashboards for that service. You don’t need to worry about putting a check mark in the folders. In fact if you do, you will most likely get an error message from the SCOM console that can be ignored.
Next click on the Task Pane tab.
Click on the Add.. button. Select the 2 “Summary Dashboard – Map” tasks. This will allow them to see the SLO data and not get an error message when drilling into the Service Map.
Finally click on Apply and OK.
Now the only thing left to do is Test.