Definition

EndDefinition

When you define a user profile, you:

• Define access rights to objects, e.g. menus, forms, filters, views, wizards, etc.
• Define edit rights for objects and data, e.g. the right to add, modify or delete.
• Define access rights to Web services provided by the Service Manager REST API.
• Define the display of secondary form presentations to replace the main form presentation in a specific context, e.g. type of record, user profile, etc.

You assign profiles to users in a secure way based on the concept of master profiles. This is a hierarchy of user profiles and their rights.  See the example

Consumption of Service Manager or Service Apps licenses

The consumption of Service Manager and Service Apps licenses by Front Office users and Back Office users is counted differently.

      See License usage rules

• Front Office users: These are end users who can access the Self Service portal to read news articles on the state of the IT network, create and monitor their tickets, consult the Service Request Catalog, search the Knowledge Base to solve their own problems, and modify their personal information.

• Back Office users: These are users who can access IT system components that are not accessible to end users. They are in charge of managing IT equipment, processing tickets, providing items and logistics.

Notes

• Each user can have only one profile.
• Users with no profile can log in to Service Manager using the default profile defined in Other Parameters > {ADMIN} Default Profile ID. They can access only one menu, Self Service.
• You can also define access to wizards and conditional form presentations by user profile in the form if you are authorized to edit display presentations for the relevant menu.
• You can manage access to the Continual Improvement menu by selecting Continual Improvement > Edit Menu if you are authorized to edit display presentations for this menu.
• Users can assign their own profile to another user if they are authorized to access the Administration menu and if they have the appropriate access rights.
• Master profiles:
  • Only the master profiles of a profile can assign it to other users.
  • The Administrator is generally the highest-level user in the hierarchy of user profiles. The Administrator must be defined as the master profile of all users in order to assign access rights to all users.
• You can duplicate a user profile. The menu defined for the user profile will automatically be copied.
• You can export and import user profiles to Service Manager. You can also export the contents of a user profile in an XML file.

Best Practice

• To enable the Service Manager administrator to define access rights for all users, you should assign the Administrator master profile to each of the user profiles.
• To enable profiles to be assigned to users, you should allow access to the Update Profile wizard in the Employee Directory.
• Use the dedicated wizard to export the contents of a user profile in an XML file.
• To view changes to a given profile, you can compare the XML files generated on two different dates.

Characteristics specific to versions 2016 and earlier

• You manage menus in modules.
  • Customers can only configure the modules of their active Service Manager license.
  • The standard configuration of menus is defined by EasyVista for every module. You can customize it.
  • You define edit rights in each module, i.e. the right to manipulate objects such as filters, views and wizards in the module menus.

• Users associated with a profile can see all of the menu items defined by the Service Manager administrator for this profile. You cannot define optional menu items.

• The User Profile form in versions 2016 and earlier is different:
  • Graphic interface
  • Options in modules and menus
  • List of users associated with the profile displayed in the Employees tab

• Procedures:
  •  How to create a user profile 
  • How to configure the modules and menus authorized for a user profile 

Menu access

Administration > Access Management > User Profiles

Screen description

Profile name: Name of the user profile.

• The list of users associated with the profile is displayed in the Employee Directory via the Profile view.
   

Master profiles: List of profiles authorized to assign the current profile to users.  See the example

• By default, only the profile of the current user is defined as the master profile.
   

Menu: Access to the menu editor to select the mandatory menu items for the current user profile from a list of those authorized for the profile.  See the procedure

(1) Edit rights and display rights: Used to indicate if the user profile has access rights to the option (box is checked) or not (box is not checked).

• Rights are assigned for all menus.
           

Option	Description of rights		Impact
REST API	Access rights to Web services provided by the Service Manager REST API See How to define a dedicated REST API user		Able to run REST requests - See Configuration of rights for the user profile
Enable editing of My Menu	Access rights to the menu editor		Able to customize the contents of the menu pane by clicking Edit found at the bottom of the menu pane
Edit Views	Right to modify views Note: This is not relevant to views associated with a report as they can be created and modified without any specific user rights.		The Edit View option will be displayed at the bottom of the View... list in List mode.
Edit Filters	Right to modify filters Note: This is not relevant to filters associated with a report as they can be created and modified without any specific user rights.		The Edit Filter option will be displayed at the bottom of the Filter list in List mode.
Edit Help	Right to add comments to wizards		The icon will be displayed in the wizard title bar in List and Form modes.
Edit display presentations	Right to modify certain objects, e.g. parent queries, forms, lists of values, or wizards		The Edit option will be displayed in the list of tools in List mode for modifying the parent query associated with the current screen, and in Form mode for modifying the form presentation.
			The icon will be displayed next to objects in Form mode.
Enable ticket creation from the search bar	Right to create tickets		Note: Only for Back Office users. The Quick Creation Button + Create a ticket is displayed next to the search bar. It allows to open directly the quick call screen. The button + Ticket is displayed in the list of the search field results. It allows to open the window for entering the title of a ticket (short description of the ticket), then the quick call screen.
Display Quick Dashboard	Right to access notification icons indicating the number of actions or approvals for the user and the associated user groups		Icons will be displayed in the notification bar. Note: Only for Back Office users.
Manage Print Report	Right to associate a smoReportDesigner report with a Service Manager) form or view		The Manage Reports wizard will be displayed in the list of wizards in List and Form modes.
Display REST API URL Menu	Right to access the REST API URL contextual menu in the list of tools in List mode > icon in the top banner		Able to retrieve the URL of a Service Manager report, required for using the Execute an internal query method of the Service Manager REST API

(2) Menu items: Tree structure of Service Manager menu items. The menu items selected are those authorized for the current user profile in the menu pane.

• You must select the parent menu before you can make one of its sub-menus available.
• To define mandatory menu items among those authorized, click Menu.  See the procedure

• Click a menu item to display the options available, e.g. filters, views, related elements, form presentations. Select the ones authorized for the current user profile.  See the procedure

• Define the rights for each menu item:
  • Assign the right to create records: Check the first box or click  next to the corresponding menu item.
  • Assign the right to modify records: Check the second box or click .
  • You can assign creation rights alone or modification rights alone.
  • If the profile is only authorized to view a menu/sub-menu, you should not select any box.
     

(3) List of Service Manager objects linked to the menu item selected in the tree structure. The objects selected are those authorized for the current user profile.

• Grids:
           
  • Filters: List of all filters defined for the current menu item.
    • Select the filters authorized for the current user profile. They will appear in the Filter list (1) in List mode.
    • If you do not select any filter, the list will only contain No Filter, which is identical to the None filter.
       
  • Views: List of all views defined for the current menu item.
    • Select the views authorized for the current user profile. They will appear in the View list (2) in List mode.
    • If you do not select any view, the list will only contain No view, which is identical to the List view.
       

• Wizards: List of all wizards defined for the current menu item.
  • Select the wizards authorized for the current user profile. They will appear in the list at the top of the screen.
             
  • If you do not select any wizard, only the Manage Reports wizard will be available if you are authorized to assign reports.
  • You can also define access to wizards in the form if you are authorized to edit display presentations.

• Related Elements: List of related elements linked to the current menu item.
  • Select the elements authorized for the current user profile. They will appear as tabs in the form.
             

• Form presentations: List of all secondary form presentations defined for the current menu item.
  • Select the form presentations authorized for the current user profile. They will be displayed instead of the main form presentation.

Procedures and Wizards

How to create a user profile

Step 1: Create the user profile

1. Select Administration > Access Management > User Profiles in the menu.

2. Select the method for creating the user profile:

• You can create a new user profile as follows:
  • Click .
  • Enter the name of the new user profile.
  • Click Save.
    The new user profile will appear in the list of user profiles.
  • Click the sequence number #  in the first column of the grid to open the form of the new user profile.

• You can also use a template as follows:
  • Select the user profile template you want.
  • Run the Duplicate wizard (Note: Available only in List mode).
  • Enter a name for the new user profile and click Finish.
    The new user profile will appear in the list of user profiles.
  • Click the sequence number #  in the first column of the grid to open the form of the new user profile.

 
Step 2: Select the master profiles for the user profile - See the example

1. Click Master Profiles.

2. Select the profiles you want and click Save.

Step 3: Assign edit rights and display rights

1. Select the rights you want to assign the user profile.  See the description
         

2. (Note: Only if you selected the REST API option) Click  next to the REST API field to define access rights to Service Manager REST API methods.

• Select the routes or resources authorized for the user profile.

• For each selected route, specify if the user profile is authorized to use the HTTP method (box is checked in the dedicated column) or not (box is not checked).
  • GET: Read-only access
  • POST: Write access
  • PUT / PATCH: Update access
  • DELETE: Delete access
     

Step 4: Select and configure the menu items authorized for the user profile

1. In the tree structure, select all menu items authorized for the user profile.

• To select sub-menu items, check the box next to the parent menu and restrict the selection by unselecting the items you do not want.

2. Assign creation and modification rights for each menu item.

• Check the first box or click  to assign creation rights.
• Check the second box or click  to assign modification rights.
• If the user profile is only authorized to view objects, you should not select any box.
   

Step 5: Select the Service Manager objects available for each menu item

1. Select the menu item in the tree structure.
The lists of Service Manager objects such as filters, views, wizards, related elements and form presentations will automatically be refreshed.

2. Check the objects authorized for the user profile.

• To select all of the objects in one go, click the box to the right of the property banner.
           
   

Step 6: Select the mandatory menu items authorized for the user profile

Procedure_SelectMandatoryEntries

Step 7: Save the user profile

1. Click Save.
The menu editor will close. You will return to the Access Management screen.

How to assign a profile to a user

1. Access the Employee Directory by selecting Asset Management / Operation / Transition / Extended CMDB / Project > Directory > Employees or Administration > Access Management > Employees in the menu.

2. Select the employees to whom you want to assign the new user profile.

3. Run the Update Profile wizard.

4. Select the new user profile and click Finish.

How to define a dedicated Service Manager REST API user

      See Service Manager REST API > Procedure

Wizards

Duplicate
Export
Delete

Example of how to assign user profiles

1. Creation of user profiles: Specify the menus that users are authorized to access based on their tasks.

• Asset Management profile with access to the Administration menu: Assigned to users in charge of managing IT assets.
• Service Desk profile: Assigned to users in charge of managing Service Desk calls.
• Logistics profile: Assigned to users who can consult stock and fulfill requests.

2. Creation of form presentations: Specify the data that users are authorized to access based on their user profile.

• Main form presentation: Access the Equipment form that displays the fields for entering IT equipment. The form presentation is displayed to users whose profile is Logistics.
• Secondary form presentation: Access the Equipment form without any financial data. The form presentation is displayed only to users whose profile is Asset Management.

3. Definition of master profiles: Specify the profiles authorized to assign the current profile to users.

• The Administrator profile is the master profile of all user profiles. It is authorized to assign all user profiles.
• The Asset Management profile is the master profile of the Service Desk profile. It can assign the Asset Management profile as well as the Service Desk profile.
• The Logistics profile can only assign the Logistics profile.
• The Service Desk profile is not a master profile. It cannot assign any profile.
   

Profile		Associated with master profile	|	Is the master profile of		Can assign the following profiles
						Administrator	|	Asset Management	|	Service Desk	|	Logistics
Administrator			|	Asset Management; Service Desk; Logistics			|		|		|
Asset Management		Administrator	|	Service Desk			|		|		|
Logistics		Administrator	|				|		|		|
Service Desk		Administrator; Asset Management	|				|		|		|