How to remove the dashboard tab for the users with "end user" role

Products

CA Service Catalog CA Service Management - Asset Portfolio Management CA Service Management - Service Desk Manager

Issue/Introduction

By design the "end user" role includes all the same access rights as the "catalog user".
In addition, the end user can subscribe to services, view invoices, view and add news messages, documents, and reports.
Therefore, the "End User" role can see more than the "Catalog User" role when they log in to Catalog.
For example, the users with the "End User" role login catalog UI, they can see more tabs than the users with "Catalog User" role.
But in some situations, the customer might want to remove the dashboard tab or invoices tab, etc for the users with "End User" role.

How to remove the dashboard tab for the users with "End User" role?

Environment

Windows.
EEM 12.x

Resolution

AA: Start and login to EEM:
1. From within the browser, start the EEM login
2. For "application", select "Service Catalog"
3. Enter the eiamadmin userid and password to login
4. After you login, go to "Manage Access Policies"
5. Click on "Launchpad" in the left hand navaigation section
>> You'll see the way, the interface is built for a role.

BB: Find the correct ACL:
1. You scroll down and search/look for the ACL "ACL_113_Launchpads" (Full access for enduser).
>> At the right hand side, under 'Resources', you can see the options, granted to an enduser.
launchpad__applications_management
launchpad__group-al-acctinfosubscriptionframe
launchpad__invoicesEU
launchpad__my_applicationsEU
launchpad__my_dashboards
launchpad__my_documents
launchpad__my_messages
launchpad__my_profile
launchpad__my_reports
launchpad__my_requestscategory
launchpad__my_requestscatalog
launchpad__my_subscriptions2

Where "launchpad__my_dashboards" listed above is why the "End User" role can see the dashboard tab, when the users with "End User" role login to the Catalog UI.
If you want to remove the dashboard tab for "End User" role, you can simply remove launchpad__my_dashboards from ACL_113_Launchpads.

CC: Remove a resource from the ACL:
1. To remove a resource:
2. Open (click on) "ACL_113_Launchpads"
3. Scroll down to Access Policy Configuration, Resources:
4. In the showed list, select "launchpad__my_dashboards" and hit the trash-can(delete) icon
5. Save and Close the policy
6. Then recycle the EEM services and the Catalog service.

DD: Add a resource to the ACL:
1. Should you want to (re)add the resource:
2. Scroll down to Access Policy Configuration, Resources
3. Enter the text launchpad__my_dashboards in the "Add resource" field
4. Hit the "+" icon
5. Save and Close the policy
6. Then recycle the EEM services and the Catalog service.

Additional Information

Note: when you modify Catalog application related "Manage Access Policies" information in EEM UI, you need to do it very carefully.
We suggest you, to take a snapshot of your EEM server or at least make a backup of your Catalog application's registration in EEM UI via the command "ant backup-eem-app" on the EEM server, just in case.
The command needs to be executed from within the Catalog-Command-Prompt.