Can EEM have multiple administrator accounts, like EiamAdmin?

Products

• CA Directory
• CA IT Asset Manager
• CA Software Asset Manager (CA SAM)
• ASSET PORTFOLIO MGMT- SERVER
• CA Service Management - Service Desk Manager
• CA Workload Automation AE - Business Agents (AutoSys)
• CA Workload Automation AE - Scheduler (AutoSys)
• Workload Automation Agent
• CA Process Automation Base

Issue/Introduction

This document provides details on how you may assign another user as an administrator account, similar to EiamAdmin.

Environment

Release: ETRIA199000-8.4-Embedded Entitlements Manager
Component:

Resolution

1. On the EEM login screen select the Application you wish to assign the new user administrator rights, login with the <EiamAdmin> user.
2. Select Manage Access Policies
3. Select scoping policies
4. Update the AdministerObjects policy
5. Add the additional usernames or groups into the existing policy to give them full authority.

This would allow an id, say <Admin2>, to be able to see/update any and all EEM objects for the given application.

 

The same procedure can be followed for additional applications within EEM.

The policy mentioned above contains read and write level access for the following resources:

ApplicationInstance
Calendar
Policy
User
UserGroup
GlobalUser
GlobalUserGroup
Folder
GlobalFolder
AppObject
iPoz
Notify
PassTicket

If the new <EiamAdmin> user should have less authority the recommendation would be to create a new scoping policy and remove the authority they should not have. For example, granting permissions to all of the resources except, "Policy" would prevent them from being able to see/work with policies.

NOTE: Please do not delete the original <EiamAdmin> user.