EEM policy example of viewing all jobs except some while other user just require access to certain jobs

book

Article ID: 224477

calendar_today

Updated On:

Products

CA Workload Automation AE

Issue/Introduction

Requirement is that users have access to all jobs except jobs starting with LUP while other users ONLY have access to LUP jobs.

Following scenario created

4 users and 4 groups created and placed each user into a group.

user1 belongs to Group-R
user2 belongs to Group-RX
user3 belongs to Group-RW
user4 belongs to Group-RWX

user1, user2 & user3 needs access to everything except jobs starting with LUP
user3 needs access to jobs starting with LUP and no access to the rest

jobname                          user1           user2           user3             user4

LUP_job1                        deny              deny           allow              deny
ABC_job1                        allow             allow           deny              allow

Environment

Release : 12

Component : WA AE/AUTOSYS RELATED EEM

Resolution

Following 3 policies created to obtain the desired results.

1. an "Explicit Denies" as-job policy as follows

https://api-broadcom-ca.wolkenservicedesk.com/attachment/get_attachment_content?uniqueFileId=chwUpaPitGYq+WGPvqmNrg==

2. 2 "Explicit Grants" as-job policies

a) allow access to all jobs for every one except for user 3 who is part of Group-RW

https://api-broadcom-ca.wolkenservicedesk.com/attachment/get_attachment_content?uniqueFileId=POgdv3/RQI2HIXI6bQw5lw==

b) allow access to all LUP jobs ONLY for user 3 who is part of Group-RW

https://api-broadcom-ca.wolkenservicedesk.com/attachment/get_attachment_content?uniqueFileId=oP9b0DEqxxQ3lsq8EX/ubQ==