Granting or Denying Explicit Privileges to Users or Groups

You can grant privileges to users or groups, or to a role.

PRIVILEGES Manage Privileges

NOTE Administration privileges apply to all products in the base database. Product level privileges only apply to your currently selected product.

NOTE When certain privilege or role assignments are updated in the Administration Console, the changes may not take effect during existing client sessions because of privilege caching. In this case, the user will need to restart the client session for the new privilege settings to apply. This behavior depends on variables that can be set in the dm.cfg file. For details, see the Administration Guide.

To grant or deny a privilege to one or more users or groups:

1. In the Administration Console, navigate to Users and Roles > Privilege Assignments.

2. In the Privileges tab, click the Privileges button in the toolbar.

3. In the navigation pane, select the privilege category from the list, Administration Privileges or Product Level Privileges.

4. In the navigation tree, find and select the appropriate privilege. Privilege details and grant rules are displayed in the content pane.

5. In the Explicit Grant/Deny Rules section of the content pane, click the Add button and select an appropriate option: Grant User, Deny User, Grant Group, Deny Group.

6. Move available users or groups to/from the Granted Users, Granted Groups, Denied Users, or Denied Groups list, as needed.

7. Click OK.

To grant or deny a user/group one or more privileges:

1. In the Administration Console, navigate to Users and Roles > Privilege Assignments.

2. In the Privileges tab, click the Users button in the toolbar.

3. In the navigation pane, select the user category for which your want to change privileges, All Active Users, All Groups, Auto Registered, or Dormant Users.

4. Select the appropriate user or group. Its privileges for each object class are displayed in the content pane.

5. In the content pane, click the Assign Privilege Rule button next to the relevant object class or functional area, and select an option, Grant or Deny.

6. Move available privileges to/ from the Grant Privileges or Deny Privileges list, as needed.

7. Privileges for deployment: You can grant or deny a privilege for a specific project or stream, deployment stage, or deployment area. For details, see Granting or Denying Explicit Privileges for Deployment Functions.

8. Click OK.

To de-assign an explicit privilege rule for a privilege:

1. On the Privileges tab, click the Privileges button on the toolbar.

2. In the navigation pane, select the category to which the privilege belongs from the list, Administration Privileges, or Product Level Privileges.

3. Expand the folder for the subcategory to which the privilege belongs in the navigation tree and select the privilege.

4. In the Explicit Grant/Deny Rules section of the content pane, select the user or group and click De-assign selected privilege rules.

5. Click OK to confirm.

Related Topics

Grant/Deny Users Dialog Box

Grant/Deny Groups Dialog Box