About Security Groups

A Security Group is at the heart of CSM security. A Security Group is a collection of CSM security rights that controls access to CSM functionality and data (Business Objects/fields). Each User/Customer is assigned to only one Security Group. The User/Customer then inherits the security rights of that Security Group, as well as access to the Roles assigned to the Security Group. Examples of Security Groups include Admin, IT service desk manager, and Portal End-User.

Use Security Groups to implement different levels of security. For example:
  • Administrator Security Group: Might have full rights to all CSM functionality and data (view, add, edit, and delete).
  • Service Desk Manager: Might have limited rights to CSM functionality and data (view, add, edit, but not delete).
  • Service Desk Worker: Might have very limited to limited rights to CSM functionality and data (view or edit only) depending upon Service Desk level (not required).
  • Customer (via the Customer Portal): Might have no rights to CSM functionality and limited rights (view only) to CSM data.
    Note: To accommodate the differences between Users and Customers, CSM provides two kinds of Security Groups: User and Customer Security Groups.
Security Group properties include:
  • Info: Name and description.
  • Rights: Security rights to access CSM functionality.
  • Business Objects: Security rights to access CSM data (ex: Business Objects/Fields).
  • File Attachments: Attachment security rights (ex: Import/link and global overrides).
  • Roles: Roles assigned to the Security Group.
  • Users: Users assigned to the Security Group.
    Note: The Users tab only displays for User Security Groups. Customers are assigned as part of their Customer Profile, and only if they require Portal login credentials.

    Security Groups Overview

CSM provides several OOTB Security Groups. Use these OOTB Security Groups as-is, edit them, or create your own using the Security Group Manager in CSM Administrator.

© Copyright 2016 Cherwell Software, LLC. All rights reserved.