Client Automation - Restrict users from accessing All Computers in the DSM explorer

Products

• CA Client Automation - IT Client Manager
• CA Client Automation

Issue/Introduction

How do I restrict users from accessing All Computers in the DSM explorer such that the user cannot deploy software or manage these computers?

Environment

CA Client Automation - All Versions

Resolution

1. Create a new profile under Security->Security Profiles containing all the users/groups which need to be restricted.
    
2. Right click All computers and select Permissions in the DSM Explorer.
   
   

   

    
3. Select the profile and set the object access to "No Access".
   
   

   

   
   Now this profile cannot access the All Computers group.
   
   Giving the users View or Read permissions will allows them to view and read information from All Computers but does not give them the ability to execute a Software Package on these units.
   
   Note: In the above example the group "Testers" is mapped.

Additional Information

There is an example defined in the DSM Explorer:

CA Client Automation - 14.0 > Using > DSM Explorer > Common Security > Security Scenario - Software Delivery