How to add another user to the System Manager role for CA ControlMinder Enterprise Management?

Products

• CA Privileged Access Manager - Server Control (PAMSC)
• CA Privileged Identity Management Endpoint (PIM)

Issue/Introduction

Description:

This document describes how to add another user, e.g. "newAdministrator" to the predefined System Manager role effectively introducing another administrator for the user interface.

Solution:

There are two ways to achieve this goal.

1. By adding a new Member Rule and according Scope Rules
   
   In the CA ControlMinder Enterprise Management GUI logon with the initial System Manger account and go to
   
   Users and Groups / Roles / Admin Roles
   
   Do the following to add user "newAdministrator" to the Admin Role: System Manager
   
   select "Modify Admin Role"
   search and select "System Manager"
   select the "Members" tab
   click "Add" to introduce a new "Member Policies"
   
   Member Rule:
   where ( Logon Name = "newAdministrator" )
   
   Scope Rules:
   Access Task (all)
   Admin Role (all)
   Admin Task (all)
   Connection (all)
   Connector Server (all)
   Endpoint (all)
   Endpoint Type (all)
   Group (all)
   Host (all)
   Host Group (all)
   Organization (all)
   Password Consumer (all)
   Password Policy (all)
   Policy (all)
   Privileged Account (all)
   Privileged Account Management Audit (all)
   Privileged Account Password Policy (all)
   Privileged Account Request (all)
   User (all)
   
   click "Ok" and "Submit" the Policy
   
   
2. By Modifying Admin Role Members
   
   In the CA ControlMinder Enterprise Management GUI logon with the initial System Manger account and go to
   
   Users and Groups / Roles / Admin Roles
   
   Do the following to add user "newAdministrator" as a member of the Admin Role: System Manager
   
   select "Modify Admin Role Members/Administrators"
   search and select "System Manager"
   select the "Membership" tab
   click "Add a user" and "Search" to select the "newAdministrator"
   click "Submit"
   
   Sometimes it is necessary to clear JBoss work items by stopping Jboss and deleting the folders ..\jboss-4.2.3.GA\server\default\ log, tmp and work.
   These are recreated and recalculated with current values upon restart.

Environment

Release: ACP1M005900-12.7-Privileged Identity Manager
Component:

Resolution

.