User roles and access

IBM® Intelligent Operations Center implements security by limiting access to features based on groups.

To use a specific feature of IBM Intelligent Operations Center, an administrator can assign a user access either as an individual, or through membership of a group that is assigned access to the feature. The following table outlines the default administrative groups that are installed with the solution, and distinguishes between the responsibilities of administrative and non-administrative users.

Table 1. Examples of roles and associated responsibilities
User Responsibilities
Solution administrator
  • Configures IBM Intelligent Operations Center components, including data sources, filter options, maps, key performance indicators, and standard operating procedures.
System administrator
  • Administers all aspects of users including defining groups, assigning permissions to groups, and assigning users to groups.
  • Provides users with the correct access level. Access level is assigned based on group membership.
  • Configures all the IBM Intelligent Operations Center components, similar to a solution administrator.
  • Configures system properties.
Platform administrator
  • Administers all aspects of tenants including creating, updating, and deleting tenants and assigning user groups to tenants.
  • Administers all aspects of contract groups including creating, updating, and deleting contract groups, managing the contracts in a group, and assigning user access to contract groups.
  • Excluding the system administrator users and group, administers all aspects of users including defining groups, assigning permissions to groups, and assigning users to groups.
  • Excluding the system administrator users and group, provides users with the correct access level. Access level is assigned based on group membership.
Non-administrative user
  • Monitors incoming data updates and alerts, and views details
  • Responds to requests to address a situation
  • Keeps information about an event or item that is in progress current by updating information
  • Looks for trends or areas of concern where correctional short-term actions are required

Administrative user and IBM Intelligent Operations Center group definitions

The following system properties define the administrative users and groups in the solution:
PlatformAdminsGroup
The PlatformAdminsGroup system property defines the platform administrator group, where the default value is PlatformAdmins.
SolutionAdminsGroup
The SolutionAdminsGroup system property defines the solution administrator group, where the default value is SolutionAdmins.
SystemAdminsGroup
The SystemAdminsGroup system property defines the system administrator group, where the default value is SystemAdmins.
SystemAdminUser
The SystemAdminUser system property defines the system administrator, where the default value is sysadmin.