We currently have the following Autosys related global ldap groups. The wildcard * represents any number which is a unique # for each user team. We have 1000+ groups.
Instead of creating a policy for each group which will require 1000+ policies, is it possible to create a MonitorViewControl policy that is applicable to all these global groups at the same time?
For example, with this single policy in place:
If I am in autosys-wcc-1894 group, this policy will only allow me to see WCC views that start with "1894-".
Meanwhile if a user is in autosys-wcc-3735 group, this user will only be able to see WCC views that start with "3735-".
Release : 12.0
Component : CA Workload Automation AE (AutoSys)
Use filters in MonitorViewControl polices.
For example, assuming that there are groups wcc1234 and wcc6789 and resources 1234*/JobFlow and 6789*/Jobflow, in the MonitorViewControl policy, add the following filter (restriction):
(global user group name endswith 1234 and request.resource startswith 1234)
(global user group name endswith 6789 and request.resource startswith 6789)
If views begin with or contains the group name, then the filter can be simplified as: request.resource startswith/contains global user group.name