Objective: Grant access to Live Maps Dashboards created in the Live Maps Authoring Console via the SCOM user roles. Otherwise known as scoping a user to a dashboard. The following will show how to grant access to a certain dashboard or groups of dashboards.
There are a couple different types of dashboards and how to set the permissions can be different. You may need to look at some of these other KB articles for the various dashboards.
- Scoping a Service
- Individual Diagrams or Lists – This KB Article
- Summary Dashboards
In this example, it will show how to share out a “Top Level Dashboard” as well as any secondary dashboards. So when the user logs onto the Live Maps Portal, they only see the dashboards you want them to see, instead of the entire list.
1. Open up the SCOM Console, and navigate to Administration > Security > User Roles.
At this point you can either create a new user role, or edit a current one. The type of User Role is important in the level of access a user will have. Example – Read-only users can see alerts, but not edit them. Operators do have the ability to edit alerts. We do not override the inherent permissions given to a user via SCOM. If you are unsure of the type of Role, it is best you familiarize yourself with the User Roles in SCOM – https://technet.microsoft.com/en-us/library/hh872885(v=sc.12).aspx
2. Double click on the user role if you are editing an existing one.
At this point you can add any users or groups you wish, or leave that for later.
Next we need to cover what is needed from the “Group Scope” and “Dashboards and Views” Tabs. It is the difference to having permissions to a group and actually being able to view the group.
Group Scope Tab – This give the user access to see the health state of the dashboard and the objects contained in the dashboard.
3. Click on the Group Scope Tab. Since it assumed you only want them to have access, you need to give them access to the following groups first.
- All Live Maps Licenses
- Live Maps Portal Group
- Or a restricted Live Maps group as detailed out in the KB article. This may be useful if you are really trying to scope down what people see in different areas of Live Maps.
Next is to find the dashboards you wish to share. Scroll down the list till you find “All Live Maps (Do not change or delete any subgroup!)”
4. Expand out the “All Live Maps (Do not change or delete any subgroups!)” then continue scrolling down till you find the Top Level dashboard. It is usually best to find the top level dashboard first. Place a check mark in the square to allow access. This will grant access to it and any sub dashboards at the same time. You can then go along and find any other dashboards you want to grant access.
Once you are done here, you can move to the next tab.
Dashboard and Views – Grants access to view the dashboard within Live Maps portal and the SCOM console.
5. Next click on the “Dashboard and Views” tab. This will take a moment as your SCOM console will want to read its folder structure. This always takes a little bit to open up.
This article assumes you don’t want the user to see all dashboards. Be sure “Only the dashboards and views selected in each tab are approved” is selected. If you leave this at “All dashboards….” The user will be able to see all of them.
6. In the Monitoring Tree tab, scroll through the folder structure till you find the dashboards you want to share. Make sure there are check marks in them. Typically for Live Maps, they will be in the Live Maps folder or any of its sub-folders, but you may have saved your dashboard in any SCOM folder.
Once you have selected all of the dashboards you want to them to view, then you can click on OK.
Now Test.
NOTES: If you select dashboards to view without group scoping that dashboard, then you may find that you can see the dashboard in the list, but not open it up, or give you a permissions issue. In some cases you will find the ability to open the dashboard and only see black boxes for your tiles. That is another indication you haven’t group scoped the sub-dashboard.
