Configuring Role Based Access Control

AppViewX offers comprehensive support for Role and Resource-Based Access Control (RBAC). RBAC is a method of restricting AppViewX functions, network resources that can be managed and monitored in AppViewX based on the roles of individual users within an enterprise. It allows you to integrate with the existing identity stores such as Active Directory (AD) and Lightweight Directory Access Protocol (LDAP) to enforce authorization policies. Roles and Resources can be customized to suit any organizational structure and user requirements.

RBAC lets employees have access rights only to the AppViewX functions and network resources they need to do their jobs and prevents them from accessing information that doesn't pertain to them.

To get an overview of the actions authorized for a particular user in the Service Catalog module:


New Menu	Old Menu
In the Platform module, from the left pane, under IDENTITY, select Role. The Role page is displayed, with all the roles listed with their Name, Description, and Status.	From the main menu, select Account > Role. The Role page is displayed, with all the roles listed with their Name, Description, and Status.
Note: For more information on how to switch between menus, click here.

On the Role page, select any role from the list of roles, for example admin.

To see the list of permissions that can be defined for this role, under the Authorized Functions tab, expand Automation and then expand Service Catalog. A selected checkbox indicates that the corresponding action has been authorized in the Reports module.

Note: If you are using the old menu, navigate to Authorized Functions > Pages.

The following table describes the various actions that can be authorized or restricted in the Service Catalog module:


Action	Description
Clone	Provision to allow or restrict a user to clone an existing catalog.
Create/Modify	Provision to allow or restrict a user to create or modify an existing catalog.
Delete	Provision to allow or restrict a user to delete an existing unpublished catalog.
Export	Provision to allow or restrict a user to export an existing catalog.
Import	Provision to allow or restrict a user to import an existing catalog.
Publish/Unpublish	Provision to allow or restrict a user to publish or unpublish a catalog.
Share	Provision to allow or restrict a user to share a catalog.
View a shared page	Provision to allow or restrict a user to view a catalog with its URL.
View all pages	Provision to allow or restrict a user to view all catalogs.

Note: If you are using the old menu, under the Authorized Functions tab, expand Pages.