User Profiles
Definition
User profiles are used to restrict the functional scope of Service Manager for a given employee or user group. They are specific to each organization and can, for example, be defined by business line based on employees' tasks.
EndDefinition
When you define a user profile, you:
- Define access rights to objects, e.g. menus, forms, filters, views, wizards, etc.
- Define edit rights for objects and data, e.g. the right to add, modify or delete.
- Define access rights to Web services provided by the Service Manager REST API.
- Define the display of secondary form presentations to replace the main form presentation in a specific context, e.g. type of record, user profile, etc.
You assign profiles to users in a secure way based on the concept of master profiles. This is a hierarchy of user profiles and their rights. See the example
Consumption of Service Manager or Service Apps licenses
The consumption of Service Manager and Service Apps licenses by Front Office users and Back Office users is counted differently.
- Front Office users: These are end users who can access the Self Service portal to read news articles on the state of the IT network, create and monitor their tickets, consult the Service Request Catalog, search the Knowledge Base to solve their own problems, and modify their personal information.
- Back Office users: These are users who can access IT system components that are not accessible to end users. They are in charge of managing IT equipment, processing tickets, providing items and logistics.
Notes
- Each user can have only one profile.
- Users with no profile can log in to Service Manager using the default profile defined in Other Parameters > {ADMIN} Default Profile ID. They can access only one menu, Self Service.
- You can also define access to wizards and conditional form presentations by user profile in the form if you are authorized to edit display presentations for the relevant menu.
- You can manage access to the Continual Improvement menu by selecting Continual Improvement > Edit Menu if you are authorized to edit display presentations for this menu.
- Users can assign their own profile to another user if they are authorized to access the Administration menu and if they have the appropriate access rights.
- Master profiles:
- Only the master profiles of a profile can assign it to other users.
- The Administrator is generally the highest-level user in the hierarchy of user profiles. The Administrator must be defined as the master profile of all users in order to assign access rights to all users.
- You can duplicate a user profile. The menu defined for the user profile will automatically be copied.
- You can export and import user profiles to Service Manager. You can also export the contents of a user profile in an XML file.
Best Practice
- To enable the Service Manager administrator to define access rights for all users, you should assign the Administrator master profile to each of the user profiles.
- To enable profiles to be assigned to users, you should allow access to the Update Profile wizard in the Employee Directory.
- Use the dedicated wizard to export the contents of a user profile in an XML file.
- To view changes to a given profile, you can compare the XML files generated on two different dates.
Characteristics specific to versions 2016 and earlier
- You manage menus in modules.
- Customers can only configure the modules of their active Service Manager license.
- The standard configuration of menus is defined by EasyVista for every module. You can customize it.
- You define edit rights in each module, i.e. the right to manipulate objects such as filters, views and wizards in the module menus.
- Users associated with a profile can see all of the menu items defined by the Service Manager administrator for this profile. You cannot define optional menu items.
- The User Profile form in versions 2016 and earlier is different:
- Graphic interface
- Options in modules and menus
- List of users associated with the profile displayed in the Employees tab
- Procedures:
Menu access
Administration > Access Management > User Profiles
Screen description
Profile name: Name of the user profile.
- The list of users associated with the profile is displayed in the Employee Directory via the Profile view.
Master profiles: List of profiles authorized to assign the current profile to users. See the example
- By default, only the profile of the current user is defined as the master profile.
Menu: Access to the menu editor to select the mandatory menu items for the current user profile from a list of those authorized for the profile. See the procedure
(1) Edit rights and display rights: Used to indicate if the user profile has access rights to the option (box is checked) or not (box is not checked).
- Rights are assigned for all menus.
Option | Description of rights | Impact | ||
---|---|---|---|---|
REST API | Access rights to Web services provided by the Service Manager REST API | Able to run REST requests - ![]() |
||
Enable editing of My Menu | Access rights to the menu editor | Able to customize the contents of the menu pane by clicking ![]() |
![]() |
|
Edit Views | Right to modify views
Note: This is not relevant to views associated with a report as they can be created and modified without any specific user rights. |
The Edit View ![]() |
![]() |
|
Edit Filters | Right to modify filters
Note: This is not relevant to filters associated with a report as they can be created and modified without any specific user rights. |
The Edit Filter ![]() |
![]() |
|
Edit Help | Right to add comments to wizards | The ![]() |
![]() |
|
Edit display presentations | Right to modify certain objects, e.g. parent queries, forms, lists of values, or wizards | The Edit option will be displayed in the list of tools in List mode for modifying the parent query associated with the current screen, and in Form mode for modifying the form presentation. | ![]() |
|
The ![]() |
![]() |
|||
Enable ticket creation from the search bar | Right to create tickets | Note: Only for Back Office users.
|
![]() |
|
Display Quick Dashboard | Right to access notification icons indicating the number of actions or approvals for the user and the associated user groups | Icons will be displayed in the notification bar. Note: Only for Back Office users. | ![]() |
|
Manage Print Report | Right to associate a smoReportDesigner report with a Service Manager) form or view | The Manage Reports wizard will be displayed in the list of wizards in List and Form modes. | ![]() |
|
Display REST API URL Menu | Right to access the REST API URL contextual menu in the list of tools in List mode > ![]() |
Able to retrieve the URL of a Service Manager report, required for using the Execute an internal query method of the Service Manager REST API | ![]() |
(2) Menu items: Tree structure of Service Manager menu items. The menu items selected are those authorized for the current user profile in the menu pane.
- You must select the parent menu before you can make one of its sub-menus available.
- To define mandatory menu items among those authorized, click Menu.
See the procedure
- Click a menu item to display the options available, e.g. filters, views, related elements, form presentations. Select the ones authorized for the current user profile.
See the procedure
- Define the rights for each menu item:
- Assign the right to create records: Check the first box or click
next to the corresponding menu item.
- Assign the right to modify records: Check the second box or click
.
- You can assign creation rights alone or modification rights alone.
- If the profile is only authorized to view a menu/sub-menu, you should not select any box.
- Assign the right to create records: Check the first box or click
(3) List of Service Manager objects linked to the menu item selected in the tree structure. The objects selected are those authorized for the current user profile.
- Grids:
- Filters: List of all filters defined for the current menu item.
- Select the filters authorized for the current user profile. They will appear in the Filter list (1) in List mode.
- If you do not select any filter, the list will only contain No Filter, which is identical to the None filter.
- Views: List of all views defined for the current menu item.
- Select the views authorized for the current user profile. They will appear in the View list (2) in List mode.
- If you do not select any view, the list will only contain No view, which is identical to the List view.
- Filters: List of all filters defined for the current menu item.
- Wizards: List of all wizards defined for the current menu item.
- Select the wizards authorized for the current user profile. They will appear in the list at the top of the screen.
- If you do not select any wizard, only the Manage Reports wizard will be available if you are authorized to assign reports.
- You can also define access to wizards in the form if you are authorized to edit display presentations.
- Select the wizards authorized for the current user profile. They will appear in the list at the top of the screen.
- Related Elements: List of related elements linked to the current menu item.
- Select the elements authorized for the current user profile. They will appear as tabs in the form.
- Select the elements authorized for the current user profile. They will appear as tabs in the form.
- Form presentations: List of all secondary form presentations defined for the current menu item.
- Select the form presentations authorized for the current user profile. They will be displayed instead of the main form presentation.
Procedures and Wizards
How to create a user profile
Step 1: Create the user profile
1. Select Administration > Access Management > User Profiles in the menu.
2. Select the method for creating the user profile:
- You can create a new user profile as follows:
- Click
.
- Enter the name of the new user profile.
- Click Save.
The new user profile will appear in the list of user profiles. - Click the sequence number # in the first column of the grid to open the form of the new user profile.
- Click
- You can also use a template as follows:
- Select the user profile template you want.
- Run the Duplicate wizard (Note: Available only in List mode).
- Enter a name for the new user profile and click Finish.
The new user profile will appear in the list of user profiles. - Click the sequence number # in the first column of the grid to open the form of the new user profile.
Step 2: Select the master profiles for the user profile - See the example
1. Click Master Profiles.
2. Select the profiles you want and click Save.
Step 3: Assign edit rights and display rights
1. Select the rights you want to assign the user profile. See the description
2. (Note: Only if you selected the REST API option) Click next to the REST API field to define access rights to Service Manager REST API methods.
- Select the routes or resources authorized for the user profile.
- For each selected route, specify if the user profile is authorized to use the HTTP method (box is checked in the dedicated column) or not (box is not checked).
- GET: Read-only access
- POST: Write access
- PUT / PATCH: Update access
- DELETE: Delete access
Step 4: Select and configure the menu items authorized for the user profile
1. In the tree structure, select all menu items authorized for the user profile.
- To select sub-menu items, check the box next to the parent menu and restrict the selection by unselecting the items you do not want.
2. Assign creation and modification rights for each menu item.
- Check the first box or click
to assign creation rights.
- Check the second box or click
to assign modification rights.
- If the user profile is only authorized to view objects, you should not select any box.
Step 5: Select the Service Manager objects available for each menu item
1. Select the menu item in the tree structure.
The lists of Service Manager objects such as filters, views, wizards, related elements and form presentations will automatically be refreshed.
2. Check the objects authorized for the user profile.
- To select all of the objects in one go, click the box to the right of the property banner.
Step 6: Select the mandatory menu items authorized for the user profile
Procedure_SelectMandatoryEntries
1. Click Menu.
The menu editor will appear.
2. Click the Menu option button.
A list of the menu items authorized for the user profile will appear.
3. Select the item you want from the Choose evSM Menu Item list.
4. (optional) Modify the default values defined for the menu item, e.g. name, filter/view combination, type of display.
5. Click Add Menu.
The menu item will be added at the bottom of the menu pane.
6. (optional) Click and drag the item to the position you want in the menu pane.
7. Repeat the procedure from point 3 onwards to add other menu items.
Modify a menu item name
- Click the menu item in the tree structure.
- Rename it.
- Click Update Menu.
Delete a menu item
- Click the menu item in the tree structure.
- Click
next to its name.
Step 7: Save the user profile
1. Click Save.
The menu editor will close. You will return to the Access Management screen.
How to assign a profile to a user
1. Access the Employee Directory by selecting Asset Management / Operation / Transition / Extended CMDB / Project > Directory > Employees or Administration > Access Management > Employees in the menu.
2. Select the employees to whom you want to assign the new user profile.
3. Run the Update Profile wizard.
4. Select the new user profile and click Finish.
- The assigned user profile will be effective when the users next log in to Service Manager.
- Menus will automatically be refreshed.
How to define a dedicated Service Manager REST API user
See Service Manager REST API > Procedure
Wizards
Example of how to assign user profiles
1. Creation of user profiles: Specify the menus that users are authorized to access based on their tasks.
- Asset Management profile with access to the Administration menu: Assigned to users in charge of managing IT assets.
- Service Desk profile: Assigned to users in charge of managing Service Desk calls.
- Logistics profile: Assigned to users who can consult stock and fulfill requests.
2. Creation of form presentations: Specify the data that users are authorized to access based on their user profile.
- Main form presentation: Access the Equipment form that displays the fields for entering IT equipment. The form presentation is displayed to users whose profile is Logistics.
- Secondary form presentation: Access the Equipment form without any financial data. The form presentation is displayed only to users whose profile is Asset Management.
3. Definition of master profiles: Specify the profiles authorized to assign the current profile to users.
- The Administrator profile is the master profile of all user profiles. It is authorized to assign all user profiles.
- The Asset Management profile is the master profile of the Service Desk profile. It can assign the Asset Management profile as well as the Service Desk profile.
- The Logistics profile can only assign the Logistics profile.
- The Service Desk profile is not a master profile. It cannot assign any profile.
Profile | Associated with master profile | | | Is the master profile of | Can assign the following profiles | ||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|
Administrator | | | Asset Management | | | Service Desk | | | Logistics | ||||||
Administrator | | | Asset Management; Service Desk; Logistics | ![]() |
| | ![]() |
| | ![]() |
| | ![]() |
|||
Asset Management | Administrator | | | Service Desk | | | ![]() |
| | ![]() |
| | ||||
Logistics | Administrator | | | | | | | | | ![]() |
||||||
Service Desk | Administrator; Asset Management | | | | | | | | |