# Assign roles and permissions to users

A role and its permissions determine what actions a user may perform and what areas of LoadRunner Enterprise they can view.

In this topic:

## About roles and permissions

To protect a project from unauthorized access, LoadRunner Enterprise enables you to assign each user to one or more roles. A user’s role is made up of permissions based on his function, like admin or tester.

LoadRunner Enterprise includes predefined System roles with default privileges. Each role has access to certain LoadRunner Enterprise tasks. For details, see Predefined roles.

When a project requires that certain user roles have privileges that are outside the scope of their default permissions, you can add your own customized user roles and assign each role a unique set of privileges.

Site administrators can create roles, edit permissions, and assign or remove roles.

Note:

- You cannot assign multiple roles to a user per project.

- When you change permissions for a role, any users assigned to that role must log out and log in again for the change to take effect.

Permission categories

Permissions are assigned to roles, and are organized into functional categories, such as tests, runs, resources, and more.

The following table lists the permissions available for each category. These permissions indicate:

- How users with the selected role can work with each item in the category.
- In some cases, whether a user with the selected role can perform additional actions related to the category.

Category | Description
--- | ---
Tests and scripts | Test and Test Folder: Permissions to create, update, and delete tests and test folders. Script: Permissions to update, delete, and upload scripts.
Runs | Run: Permissions to delete, update, and start test runs. Test Set and Test Set Folder: Permissions to create, delete, and update test sets and folders. Run Result: Permissions to collate and analyze run results, and to delete and upload result files.
Assets | Monitors: Permissions to create, delete, and update monitors. Analysis Template: Permissions to create, delete, and update analysis templates. Assets folder: Permissions to create, delete, and update. Note: A user cannot have delete assets folder permissions without having both delete analysis template and delete monitor permissions. Topology: Permissions to create, delete, and update.
Resources | Host: Permissions to update, check, reboot, and reconfigure hosts, create and delete private hosts, kill processes, manage the data processing queue, configure the LoadRunner agent, and provision cloud hosts. Timeslot: Permissions to create, delete, and update timeslots.
Application | Trend reports: Permissions to create, delete, and update trend reports.

Predefined roles

You can assign one or more of the following predefined system roles to users:

Performance Tester | Permissions to perform any actions under all categories.
Viewer | View permissions only (user is unable to perform any other actions).

Note:

- Predefined roles cannot be customized, and are indicated by "System" in the upper-right side of the panel.

- During Site Admin and LAB migration, all users are automatically set with Viewer role. During project migration, users that belonged to the TDAdmin group in the ALM project are set with Performance Tester permissions in LoadRunner Enterprise, and the rest are set with Viewer permissions.

Back to top

## View roles and permissions

Site admins can check which permissions have been assigned to each role for each functional category of LoadRunner Enterprise.

1. In LoadRunner Enterprise Administration, select Management > Roles and Permissions.

2. In the Roles and Permissions page, select a role to expand the list of permissions. The permissions are displayed for each item.

Back to top

## Create roles

Every user role has a set of privileges, or permissions, which are defined by the LoadRunner Enterprise project administrator. If you determine that the default user roles do not meet the needs of your project, you can create new roles with customized permissions.

Example: Suppose a group of users called `Group1` has Viewer permissions. To work more effectively on the project, they need to create Trend reports. As the LoadRunner Enterprise project administrator, you can assign these privileges to the `Group1` role by specifying permission settings.

1. In LoadRunner Enterprise Administration, select Management > Roles and Permissions. The Roles and Permissions page opens.

2. On the Roles and Permissions toolbar, click Add Role.

3. In the Roll Name box, type a name for the group. A group name cannot include the following characters: ( ) @ \ / : * ? " ` < > | + = ; , %

4. In the Based on Role list, select an existing role that has similar access privileges to the new role you want to create. This minimizes the level of customization you need to do.

   Click OK. The new role name is added to the roles list.

5. Customize the role permissions.

   1. Click an entity tab (Tests and Scripts, Runs, Assets, Resources, Application) to see the permissions for each entity.

   2. Select the check box for the permissions that the selected role should have for each entity.

Back to top

## Assign or unassign roles

Every LoadRunner Enterprise user must be assigned at least one role in each project to which he/she is assigned. By default, the Viewer role is assigned.

After adding a user to the project, you can assign roles. For details, see Assign projects and roles to a user.

You can change roles for users or unassign users from roles and projects. For details, see Change the role assigned to a user and Remove users from a project.

Back to top

## Change the role assigned to a user

You can change the role of a user assigned to the project from the Projects page.

1. On the LoadRunner Enterprise Administration sidebar, select Management > Projects.

2. Select a project from the Projects list (click the link in the Project Name column). The project details page opens in the Main Details view.

3. In the Users view, select the user that you want to change the role.

4. Click the Role dropdown and select a different role.

Back to top

## Edit user-defined roles

Site administrators can edit permissions and the name of a user-defined role.

1. In LoadRunner Enterprise Administration, select Management > Roles and Permissions. The Roles and Permissions page opens.

2. In the roles list, expand the user-defined role for which you want to edit permissions. For each item, check or clear the permissions.

3. To edit the name of a user-defined role, hover over the name of the role you want to change, click , and edit the name as required.

Back to top

## Delete roles

You can delete any user-defined roles from LoadRunner Enterprise provided they do not have users assigned to them. For details, see Assign roles and permissions to users.

1. In LoadRunner Enterprise Administration, select Management > Roles and Permissions. The Roles and Permissions page opens.

2. In the roles list, select the user-defined role you want to remove and click the Delete button.

   Note:

   - You cannot delete the predefined "System" roles.

   - This button is disabled for roles that have users assigned to them.

3. Click Delete to confirm. The role is removed from the list.

Back to top

See also:

- Manage users in a project
- Create projects and domains
- Manage projects

https://admhelp.microfocus.com LoadRunner Enterprise 8942
Tips to improve your search results... LoadRunner Enterprise Help Center LoadRunner Enterprise Help LR Enterprise Help 2020_SP2-SP3 All View Local Help Center View Online Help Center back Go back in browser history forward Go forward in browser history Remove search highlights next topic Go to next topic previous topic Go to previous topic Print the current topic Version: