Restricting permissions on users to view only certain campaigns

Products

• CA Identity Manager
• CA Identity Governance
• CA Identity Portal

Issue/Introduction

This procedure outlines steps to create a restrictive role that limits a user's visibility to campaigns associated with a specific universe.

Environment

Identity Governance

14.x

Resolution

Phase 1: Create the Role

1. Launch the Client Tools.
2. Select File > Review database, then unlock and open Eurekify.cfg.
3. In the Roles panel, create a new role (e.g., "Limited Compliance Officer").
4. Save the configuration to the database.

Phase 2: Create and Assign the Resource

1. Select File > Review database, then unlock and open eurekify_resources.rdb.
2. Right-click and select the option to create a new resource with the following values:
   • Res Name 1: [CAMPAIGN][RW]
   • Res Name 2: [UNIVERSENAME] (Replace with the specific name of the universe).
   • Res Name 3: *
   • Type: DOC_ACCESS
   • Filter 1, 2, 3: *
3. Save the eurekify_resources.rdb to the database.
4. Drag and drop the new resource from eurekify_resources.rdb into the role pane of Eurekify.cfg.
5. When prompted, select Add to role to confirm.
6. Save Eurekify.cfg to the database.

Phase 3: Add Certification Management Permissions

1. In the role pane of Eurekify.cfg, right-click the new role.
2. Select the option to add an existing resource link with the following values:
   • Res Name 1: [PERMISSION][RW]
   • Res Name 2: [*][CERTIFICATION MANAGEMENT]
   • Res Name 3: *
3. Save Eurekify.cfg to the database. Note: This OOTB resource is required to enable the Certification Management menu on the portal if sage.security.disable=false.

Phase 4: Assign to User

1. In the users pane, select the target user.
2. Create a link between the user and the new role.
3. Save Eurekify.cfg to the database.
4. Validate by logging into the portal as the user; they should now only see campaigns for the specified universe.