Fixlet permissions

Is it possible to allow operators to execute and view some customized fixlets ? I created one role but “BES Support” is by default in assigned sites for operators. How can I override it?

Permissions in this context is done at the Site level, rather than at the Fixlet level. BES Support however is viewable/readable by all operators (by design). If you would like to prevent operators from deploying Fixlets/Tasks from BES Support, you might consider globally hiding them.

2 Likes

To build on top of @Aram 's suggestion… I definitely recommend globally hiding some of the content in BES Support, but I leave much of it unhidden.

Thanks Aram and jgstew.
I am able to achieve it by hiding contents , but dont you think IEM should allow us to create such role ?

I think the idea is that IBM doesn’t want you to make it so you accidentally remove access to BES Support from yourself.

Yeah, BES Support is a special case because there is content in there that every operator needs to see in order to properly render the navigation panes in the console. So hiding the content individually is the only option for this particular site.

1 Like

That content could be moved to a site that does not have any Fixlets/Tasks/Analyses in it or the Fixlets/Tasks/Analyses could be moved to a separate site.

True, but there are benefits to the content in that site, as well, such as being able to deploy if the client is in a restricted state, e.g. license expired. We could obviously make code changes to support that from a different site, as well, but we would have to maintain backwards compatibility for several years anyway by keeping everything in BES Support.

1 Like

I do agree, and I don’t think it is necessary to make such a significant change.

It would make more sense to just move items from that site to another that might not be needed as much as the others, but I am not certain which those would be.

The console installer is probably the most significant that would be nice to have outside of BES Support for better access control.

@sidd which fixlets in BES Support do you have issue with?