How to restrict few users or groups from using specific objects in CA ServiceDesk Universe?

Products

• CA IT Asset Manager
• CA Software Asset Manager (CA SAM)
• ASSET PORTFOLIO MGMT- SERVER
• SUPPORT AUTOMATION- SERVER
• CA Service Desk Manager - Unified Self Service
• CA Service Desk Manager
• CA Service Management - Asset Portfolio Management
• CA Service Management - Service Desk Manager

Issue/Introduction

Description:

The CA ServiceDesk universe is grouped into objects which access data from ServiceDesk MDB database. At times not all the users are authorized to use all the objects and attributes in the reports. This document explains the steps for providing object level security in CA Business Intelligence.

Solution:

There are many objects in the CA ServiceDesk universe. All the objects can be accessed by all the users by default. Any users can select and add an object to an existing report or a new report and view the data by running the report. However, this can be avoided by implementing object level security on the CA ServiceDesk universe.

Object-level security is based on restricting a user from viewing and selecting a specific object in the query panel. By restricting access to an object within the universe, the user will not be able to see the object in the query panel.

Steps to implement object security:

1. Login to Designer on the CA Business Intelligence Server as Administrator
   
   
2. Click on File->Import, In the import window click on Browse and select CA Universes folder. See Fig 1
   
   Fig 1
   

   <Please see attached file for image>

   
   
   
3. Click Ok to import the Universe.
   
   
4. After the universe is imported, click on Tools->Manage Security->Manage Access Restrictions
   
   
5. In the Manage Access Restrictions windows, click on New to create a new access restriction. See Fig 2
   
   Fig 2
   

   <Please see attached file for image>

   
   
   
6. In the Edit Restriction Window, enter a name for the restriction.
   
   
7. Go to Objects tab, click on Add.
   
   
8. In the New Restricted Object pop up, click on Select button. See Fig 3
   
   Fig 3
   

   <Please see attached file for image>

   
   
   
9. Select the object or the attributes which you want to restrict and click Ok See Fig 4
   
   Fig 4
   

   <Please see attached file for image>

   
   
   
10. Click Ok
    
    
11. Click Ok to close the Edit Restriction window
    
    
12. In the Available Users and Groups section click on Add User/group. See Fig 5
    
    Fig 5
    

    <Please see attached file for image>

    
    
    
13. From the Available list of users and groups section, select the user or group to restrict and move it to the Selected Users and Groups section and click on OK. See Fig 6
    
    Fig 6
    

    <Please see attached file for image>

    
    
    
14. Click on Apply to add the restrictions
    
    
15. Click Ok to close the Manage Access Restrictions Window
    
    
16. From the File menu select Save to save the universe.
    
    
17. From the File menu, select Export
    
    
18. In the Export Universe window, leave the default settings and click OK to export the universe.
    
    
19. When a user of ServiceDesk Manager group tries to modify any web intelligence report, in the query panel the restricted object is no longer visible. See Fig 7
    
    Fig 7
    

    <Please see attached file for image>

    
    
    In the above screenshot, the issue object is no longer visible.

Environment

Release:
Component: ARGIS