Profiles

Profiles can be assigned to user groups to control the visibility of incidents, alerts, applications, resource groups, and resources to those users. These profiles can combine restriction filters with redaction policies to form the final redaction criteria that is applied to a user group.

A profile can be a Group profile or a Base profile. By default, there is always a Base profile which applies to all users. You can use this profile to assign restriction filters and redaction policies to all users. You can use one or more Group profiles to assign restriction filters and redaction policies to specific groups of users. Group profiles can augment or override the settings in the Base profile. The Base profile should be configured to show the minimum set of entities or properties that users in the system can see, so that the filter and policies should be aiming to remove everything from the views, while the group profiles aim to add things back into the views. A profile can be enabled, even when the underlying filters and policies are disabled.

Restriction filters control the visibility of incidents, alerts, applications, resource groups, and resources. These filters are assigned to users through profiles. You can use restriction filters to control how information is distributed to your users. Restriction filtering works by enabling you to specify that under certain situations, users should only see particular alerts, incidents, applications, resource groups or resources based on particular conditions.

Notes:

  • Restriction filters do not hide resources in topology graph visualisations, so a combination of filter and redaction is required to make sure that no data is exposed.
  • If no filter or policy shows it might be due to none being available for that data type.

To create and apply a restriction filter, you need to create a filter from either the Incidents, Alerts, or Resource management (application, resource, resource group) page and save the filter as a restriction filter. After creating a restriction filter, you can then include it in the Base profile or an appropriate group profile. For more information, see Creating restriction filters.

Redaction policies work alongside filtering and allow you to specify the visibility and content of the properties of incidents, alerts, applications, resource groups, and resources, and are assigned to users through profiles. The policies are defined using Rego, a programming language created specifically for redaction policies, which allows you to manipulate the end result output either by hiding or showing all the properties or reacting or modifying particular properties. For more information, see Creating redaction policies.

If you need to create or manage a user group before applying any profile, see Managing user groups.

Prerequisites

To work with profiles, and their associated restriction filters and redaction policies, you must possess an administrative user account with the Manage profiles role. For more information, see Roles and permissions.

Note: In the installation resource you are using you need to set the Enable Group Profiles radio button to True.

Enable Group Profiles

Creating a group profile

  1. From the main navigation menu, go to Administration > Profiles.

    Profiles
    Figure. Profiles list

By default, the Profiles tab for the Profiles page is displayed.

Profiles list
Figure. Profiles list

  1. Click Create group profile. The options for creating a New profile are displayed.

    New profile creation
    Figure. New profile creation

  2. On the General details page, enter the following details:

    • Select whether to enable the profile by switching the value of Enabled from No to Yes. You can enable or disable a profile later as needed.

    • Enter a Name for the profile.

    • Enter a Description (optional) for the profile

    • Select the User groups assigned to this profile. Selected user groups display in a User group list.

  3. Click through each of the following pages to select any required restriction filters or redaction policies to control the visibility of properites and content:

    • Incidents

    • Alerts

    • Applications

    • Resource groups

    • Resources

    • To control visibility, select a Restriction filter. For example, on the Incidents page, this selection is in the section Visibility of Incidents. The selection is in a similar section on each page.

      After selecting the filter, switch the toggle to enable the filter.

      Note: If you need to create a restriction filter, you must go to the console page for that feature to create the filter. For more information, see Creating restriction filters. Ensure that you save the filter as a restriction filter.

      To view general details for a selected restriction filter, click the Information icon. The following details are displayed for the filter:

      • Name
      • Created (date)
      • Created by
      • Last modified (date)
      • Last modified by

    • To control visibility and content, select a Redaction policy. For example, on the Incidents page, this selection is in the section Visibility and content of Incident properties. The selection is in a similar section on each page.

      After selecting the filter, switch the toggle to enable the policy. Once a filter/policy has been selected from the list the toggle automatically switches to on but it can be set to off if required.

      Notes:

      • If you need to edit the selected policy, click the Edit selected redaction policy icon.

      • If you need to create a redaction policy, complete one of the following actions:

        • Click the Add new redaction policy icon.
        • Select a policy and click the Duplicate selected redaction policy icon.

      For more information about creating and editing redaction policies, see Creating redaction policies. Redaction policies must be authored in the Rego language.

      To view general details for a selected restriction filter, click the Information icon. The following details are displayed for the filter:

      • Name
      • Created (date)
      • Created by
      • Last modified (date)
      • Last modified by

  4. Click Save profile. Your new profile is saved and you are returned to the Profiles page. The new profile is now included in the list of existing profiles.

Viewing a profile

To view an existing group profile or the base profile, go to the Profiles page in the UI:

  1. From the main navigation menu, go to Administration > Profiles. By default, the Profiles tab for the page is displayed. This tab lists the existing profiles and the following general details for those profiles:

    • Name:
    • Type:
    • Scope:
    • Created:
    • Created by:
    • Last modified:
    • Last modified by:
    • Enabled:

  2. (Optional) If needed, you can filter the list of profiles to help you find a specific profile.

Enabling or disabling a profile

  1. From the main navigation menu, go to Administration > Profiles. By default, the Profiles tab for the page is displayed. This tab lists the existing profiles.

  2. Find the profile that you want to enable or disable. If needed, you can filter the list of profiles to help you find a specific profile.

  3. For that profile, click the Options (3-dot) menu and click either Enable or Disable.

    A dialog requesting you to confirm your choice is displayed. This dialog indicates the number of affected user groups for changes to the selected profile. Click Enable profile or Disable profile to confirm your choice.

Editing a profile

  1. From the main navigation menu, go to Administration > Profiles. By default, the Profiles tab for the page is displayed. This tab lists the existing profiles.

  2. Find the profile that you want to edit. If needed, you can filter the list of profiles to help you find a specific profile.

  3. For that profile, click the Options (3-dot) menu and click Edit selected.

  4. Complete any required changes and click Save profile. For details on the available settings, see Creating a group profile.

    Note: If you want to edit the Base profile, the available settings to edit are the same as a group profile.

Duplicating a profle

  1. From the main navigation menu, go to Administration > Profiles. By default, the Profiles tab for the page is displayed. This tab lists the existing profiles.

  2. Find the profile that you want to duplicate. If needed, you can filter the list of profiles to help you find a specific profile.

    Note: You cannot duplicate the Base profile.

  3. For that profile, click the Options (3-dot) menu and click Duplicate.

  4. Enter or select the required settings for the profile and click Save profile. For details on the available settings, see Creating a group profile.

Deleting a profile

  1. From the main navigation menu, go to Administration > Profiles. By default, the Profiles tab for the page is displayed. This tab lists the existing profiles.

  2. Find the profile that you want to delete. If needed, you can filter the list of profiles to help you find a specific profile.

  3. For that profile, click the Options (3-dot) menu and click Delete.

    A dialog requesting you to confirm the deletion is displayed. Click Delete to confirm and delete the profile.