Setting Permissions through Design Time Policy Details
Pre-requisites:
To set instance-level permissions on a design time policy in CentraSite, ensure you have the required permissions.
To set permissions on a organization-specific policy, you must belong to a role that has the Manage Design Time Policies for the organization to which the policy belongs or have the Full instance-level permission on the policy itself.
To set permissions on a system-wide policy, you must belong to a role that has the Manage System-Wide Design Time Policies or have the Full instance-level permission on the policy itself.
Important: If you belong to a role that includes the Manage System-Wide Design Time Policies permission, you have the ability to modify permissions of CentraSite's predefined policies. However, you should not do this. These policies perform critical functions within the registry and must not be modified except under the direction of a technical representative from Software AG.
Be default, all users have View permissions on the design time policies in the registry.
Users who belong to a role that includes the Manage Design Time Policies permission for an organization have Full permission on the policies that belong to the organization. Users who belong to a role that includes the Manage System-Wide Design Time Policies permission, have Full permission on all system-wide policies. To enable other users to modify and delete policies, you must modify the policy's instance-level permission settings.
You can modify the instance-level permissions for a policy by executing a design time policy or by specifying the permissions manually on the Permissions action.
When setting permissions on policies, remember these points:
You can assign permissions to any individual user or group defined in
CentraSite.
Note: If you give the permission to a user to view, modify or delete a policy, and you want that user to be able to perform these operations using CentraSite Control, ensure that the user belongs to a role that also has the Use the Policy UI permission.
The groups to which you can assign permissions include the following system-defined groups:
Group Name | Description |
Users | All users within a specified organization. |
Members | All users within a specified organization and its child organizations. |
Everyone | All users of CentraSite that includes guest users (if your CentraSite permits access by guests). |
If a user is affected by multiple permission assignments, the user receives the union of all the assignments. For example, if group ABC has
Modify permission on a policy and group XYZ has
Full permission on the same policy, users that belong to both groups will, in effect, receive
Full permission on the policy.
To assign instance-level permissions to a design time policy
1. In the CentraSite Business UI activity bar, click Design Time.
2. To view the Design Time policies:
a. Go to the advanced search panel.
b. In the Narrow Your Results section, perform the following actions:
a. Locate Applicable Scopes. By default, Policy is selected. Additionally, you can also refine your search further by selecting the following options:
Show only Productive Policies
Include Predefined Policies
b. Add a Keyword and click the plus button next to the field to add it to the Current Search Criteria recipe.
c. You can also further refine your search by selecting values for the following from their respective drop-down list and clicking the plus sign next to these fields to add them to the search criteria:
Note: The moment you click the plus sign, the result is refreshed in the Search Results page.
Applicable Organizations
Applicable Types
Applicable Event Types
d. This displays a list of defined Design Time policies in the Search Results page.
3. Select the policy whose permissions you want to modify.
This opens the Design Time Policy Details page.
4. If the policy is active, deactivate it.
Note: You cannot modify the permission settings of an active policy.
5. From the top menu bar, select Permission action button.
The Assign Permissions window opens.
6. To add users or groups to the Users / Groups list, in the Assign Permissions window, you can perform either of the following actions:
a. Use the Type ahead functionality by typing a few letters in the Add User or Group to bring up the possible matches for a user or group and click the plus button to select the desired match.
b. Click Choose in the Add User or Group field. In the Choose Users and Groups window, click the search icon to select the user or groups to whom you want to assign permissions and click Ok.
7. Once you have selected the user or group, assign specific permissions to each user or group in the User and Group Permissions section by selecting the checkbox for the user or group. The options are as follows:
Permission | Allows the selected user or group to... |
| View the policy. |
| View and edit the policy. |
| View, edit, and delete the policy. This permission also allows the selected user or group to assign instance-level permissions to the policy. |
8. To remove a user or group from the User and Group Permissions list, click 
adjacent to the group name or user ID. 9. Click Save.
10. When you are ready to put the policy into effect, Activate the policy.
