search cancel

How to restrict few users or groups from using specific objects in CA ServiceDesk Universe?


Article ID: 54200


Updated On:


CA IT Asset Manager CA Software Asset Manager (CA SAM) ASSET PORTFOLIO MGMT- SERVER SUPPORT AUTOMATION- SERVER CA Service Desk Manager - Unified Self Service CA Service Desk Manager CA Service Management - Asset Portfolio Management CA Service Management - Service Desk Manager



The CA ServiceDesk universe is grouped into objects which access data from ServiceDesk MDB database. At times not all the users are authorized to use all the objects and attributes in the reports. This document explains the steps for providing object level security in CA Business Intelligence.


There are many objects in the CA ServiceDesk universe. All the objects can be accessed by all the users by default. Any users can select and add an object to an existing report or a new report and view the data by running the report. However, this can be avoided by implementing object level security on the CA ServiceDesk universe.

Object-level security is based on restricting a user from viewing and selecting a specific object in the query panel. By restricting access to an object within the universe, the user will not be able to see the object in the query panel.

Steps to implement object security:

  1. Login to Designer on the CA Business Intelligence Server as Administrator

  2. Click on File->Import, In the import window click on Browse and select CA Universes folder. See Fig 1

    Fig 1

    <Please see attached file for image>

    Figure 1

  3. Click Ok to import the Universe.

  4. After the universe is imported, click on Tools->Manage Security->Manage Access Restrictions

  5. In the Manage Access Restrictions windows, click on New to create a new access restriction. See Fig 2

    Fig 2

    <Please see attached file for image>

    Figure 2

  6. In the Edit Restriction Window, enter a name for the restriction.

  7. Go to Objects tab, click on Add.

  8. In the New Restricted Object pop up, click on Select button. See Fig 3

    Fig 3

    <Please see attached file for image>

    Figure 3

  9. Select the object or the attributes which you want to restrict and click Ok See Fig 4

    Fig 4

    <Please see attached file for image>

    Figure 4

  10. Click Ok

  11. Click Ok to close the Edit Restriction window

  12. In the Available Users and Groups section click on Add User/group. See Fig 5

    Fig 5

    <Please see attached file for image>

    Figure 5

  13. From the Available list of users and groups section, select the user or group to restrict and move it to the Selected Users and Groups section and click on OK. See Fig 6

    Fig 6

    <Please see attached file for image>

    Figure 6

  14. Click on Apply to add the restrictions

  15. Click Ok to close the Manage Access Restrictions Window

  16. From the File menu select Save to save the universe.

  17. From the File menu, select Export

  18. In the Export Universe window, leave the default settings and click OK to export the universe.

  19. When a user of ServiceDesk Manager group tries to modify any web intelligence report, in the query panel the restricted object is no longer visible. See Fig 7

    Fig 7

    <Please see attached file for image>

    Figure 7

    In the above screenshot, the issue object is no longer visible.


Component: ARGIS


1558713990425000054200_sktwi1f5rjvs16t9w.gif get_app
1558713988349000054200_sktwi1f5rjvs16t9v.gif get_app
1558713986308000054200_sktwi1f5rjvs16t9u.gif get_app
1558713984443000054200_sktwi1f5rjvs16t9t.gif get_app
1558713982613000054200_sktwi1f5rjvs16t9s.gif get_app
1558713980550000054200_sktwi1f5rjvs16t9r.gif get_app
1558713978607000054200_sktwi1f5rjvs16t9q.gif get_app