Security Groups

APM provides three security groups to which you can assign users:

  • APM User. The APM User creates and manages his own application entities, responds to surveys or requests for more information, and uses portlets to view application data. See Application Portfolio Management User's Guide for more information about the APM user's role.

  • APM Analyst. The APM Analyst has all the abilities of an APM User and can create and manage any APM entity, analyze applications using application sets, portlets, reports, graphing, and groupings, import and export entity data, and define portlets. See Application Portfolio Management Analyst's Guide for more information about the APM analyst's role.

  • APM Administrator. The APM Administrator installs, sets up, and maintains APM, defines users, customizes fields and validations for entities, and can create customized entities, data sources, workflows, validations, report types, and security groups. See The Role of the APM Administrator for more information about the APM administrator's role.

Note: Any user's ability can be affected by the roles assigned to the user and any entity-level or field-level settings assigned to the user.

Table 3-2. APM security group access grants shows the access grants assigned to each APM security group. For a description of PPM access grants, see Security Model Guide and Reference. For a description of APM-specific access grants, see Access Grants.

Note: View access grants provide read-only access to screens and entities. Users who do not have a view access grant cannot see certain workbenches and windows.

Edit access grants typically enable a user to view, create, modify, and delete entities. For example, if you have the Edit Requests access grant, you can delete requests that you have created.

Table 3-2. APM security group access grants
Category Access Grant Name Security Groups
APM User APM Analyst APM Administrator

Config

Edit Report Types

   

Config

Edit Validation Values

   

Config

Edit Validations

   

Config

View Notification Templates

   

Config

View Report Types

   

Config

View Special Commands

   

Config

View User Data

   

Config

View Validations

   

Config

View Workflows

   

Demand Mgmt

Access Request Query Builder

Demand Mgmt

Edit Request Header Types

   

Demand Mgmt

Edit Request Types

   

Demand Mgmt

Edit Requests

Demand Mgmt

View Request Header Types

   

Demand Mgmt

View Request Types

   

Demand Mgmt

View Requests

 

Deployment Mgmt

View Packages

   

Financial Mgmt

Edit Actuals on Financial Summary

 

Financial Mgmt

Edit Approved Budget

 

Financial Mgmt

Edit Cost Security

Financial Mgmt

Edit Financial Benefits

 

Financial Mgmt

Edit Forecasts on Financial Summary

 

Financial Mgmt

Set a Financial Summary Snapshot as the Plan of Record

 

Financial Mgmt

View Costs on Financial Summary

 

Financial Mgmt

View Financial Benefits

 

Portfolio Mgmt

Assess Application Portfolio

 

Sys Admin

Configure Modules

   

Sys Admin

Distribute Modules

   

Sys Admin

Edit Security Groups

   

Sys Admin

Edit Users

   

Sys Admin

Manage Translations

   

Sys Admin

Server Administrator

   

Sys Admin

Server Tools: Execute Admin Tools

   

Sys Admin

Server Tools: Execute SQL Runner

   

Sys Admin

View Security Groups

   

Sys Admin

View Server Tools

   

Sys Admin

View Users

   

System

Edit All Reports

   

System

Edit Portlet Definition

 

System

Import Data

 

System

Open Workbench

   

System

Ownership Override

   

System

Submit Reports

 

System

View Portlet Definition