topic Re: Granting delete access only ? in Server Management - Systems Insight Manager

Granting delete access only ?

Mikael Rönnbäck — Tue, 17 Oct 2006 02:39:01 GMT

Does anyone know of a way to grant users delete access only, i.e. not grant them "all tools" access on the CMS, but just so they are allowed to delete outdated objects ?

(Have a fairly high turnover of servers)

Re: Granting delete access only ?

LukaS_9 — Tue, 17 Oct 2006 03:50:42 GMT

Hi,
I think if you give "rights NONE" to a user, the only way to grant him to delete a system is to create a new toolbox.
Try this procedure:
1 - Copy the attached xml file on /var/opt/mx/tools of CMS (this came from SIM lab)
2 - mxtoolbox -a "Operator Tools"
3 - mxtool -a -f /var/opt/mx/tools/remove-system.xml
4 - give to a user the authorization to run "Operator Tools"

The user will have "Operator Tools" on Tools menu'.

regards
Luca

Re: Granting delete access only ?

Mikael Rönnbäck — Tue, 28 Nov 2006 13:42:36 GMT

Thanks, but would you or anyone else happen to know what path that would be on a Windows server instead of a Linux ?

Re: Granting delete access only ?

Mikael Rönnbäck — Tue, 28 Nov 2006 14:01:05 GMT

I think I've gotten the path right, though I can't seem to get it to run, I accidentally didn't change execute-as from root to my service account and now it just tries to run as root which of course does not exist.

Re: Granting delete access only ?

Mikael Rönnbäck — Tue, 28 Nov 2006 14:13:42 GMT

Now it works, must include "domain name\service account" to run under Windows.