Access/Authorization Implementation

Products

• CA Application Performance Management Agent (APM / Wily / Introscope)
• CA Application Performance Management (APM / Wily / Introscope)
• INTROSCOPE
• DX Application Performance Management

Issue/Introduction

I was wondering if there is a way, whether it is inside Teams View or the CA Introscope Workstation client, if you can separate out groups of people so they can only view the management modules, alerts, metric groupings etc, that they create.

So essentially, hide everything one groups is creating from the other groups.  This is to minimize noise and effectively stop others from, for example, using dashboards others have created.

I know you can restrict in various xml confi files, what people can do, just not sure if you can limit what they can view/see.

Environment

Release : 10.7.0

Component : APM Agents

Resolution

Everything is tied to the domain. That is if you grant userA and userB access to DomainA, then both will see each other's management modules, alerts, etc... that both create. So if userA creates MM1 and userB creates MM2, there is no way to exclude userA from seeing/accessing MM2 and userB from seeing/accessing MM1.

The only way to achieve the above would be to give separate domains to userA and userB.

In addition, in the domains.xml file, you would have to ensure that Agent1 would go to Domain1 so that userA can only see it and user B can only see Agent2 in Domain2 and use users.xml to define the users.