Events and dashboards privileges scoping

Products

• Information Centric Analytics

Issue/Introduction

Is it possible to configure a portal role that restricts access to incident views within the application, ensuring the user cannot view incidents at all? Is it possible to grant a user privileges to view an incident dashboard, but not view the incidents themselves?

Environment

Version : 6.x

Component : Portal Privileges

Resolution

By default, users do not have privileges to view any incidents or events in ICA. These privileges must be either explicitly assigned to a user or inherited by a user through his or her role assignments (which can be inherited through group membership). For more information about privileges and privilege scoping, refer to the Privileges Configuration section of the Symantec ICA Administrator Guide.

It's not possible to configure a role that allows access to views (for example, dashboards) in the console while denying access to view all incident detail pages. You can limit the scope of a user's privileges so that they can only view incidents from a particular organizational unit or region, and in so doing you'll also limit the aggregations they see in dashboards, but you cannot allow a user to view aggregations in dashboards and not have access to view the incidents represented by those aggregations.