AppClarity user roles
AppClarity supports Role Based Access Control (RBAC). RBAC allows a Tachyon Administrator to allocate specific AppClarity based roles to different users, thereby enabling access and actions to the screens those users need to carry out their roles. This avoids unwanted access being permitted to SAM team members outside of their role, ensuring data security and improving governance.
There are pre-defined roles with sets of permissions aimed at particular SAM user types. Tachyon Administrators can assign any of these AppClarity based roles to any AD domain user.
Typically you would install AppClarity using the the Tachyon installation account. This role has purposefully limited permissions, but is able to add new Tachyon users and assign roles to those users. So after installing AppClarity one of the first steps would be to add the AppClarity Administrator role to an existing or new Tachyon user and then continue with the verification steps to confirm that AppClarity has been successfully installed. Please refer to Verifying for more details.
After the AppClarity installation has been verified you would then have the ongoing task of identifying your SAM users adding them as Tachyon users and assigning their AppClarity roles to allow them to carry out their SAM duties.
Note
AppClarity permissions are granted on a module level (for example, Entitlement, Reclaim or Compliance) and not at per screen level (such as Entitlement→Summary Report or Reclaim→Savings), for example:
A Tachyon Administrator has a request for a Reclaim Viewer to only view the Entitlement→Summary Report.
The Tachyon Administrator assigns the role of Entitlement Administrator to the Reclaim Viewer.
The Reclaim Viewer would be able to view all screens under Entitlement module, not just the requested screen, Entitlement→Summary Report.
Pre-defined AppClarity roles
The pre-defined roles are:
Role | Actions |
|---|---|
AppClarity Administrator | Create, update, delete and view AppClarity Compliance, Entitlement, License Demand and Reclaim - view and export Inventory - view, edit, delete and export Associations |
Reclaim Administrator | Create, update, delete and view AppClarity Reclaim - view and export Inventory - view, edit, delete and export Associations |
Reclaim Viewer | View only AppClarity Reclaims |
Entitlement Administrator | Create, update, delete and view AppClarity Entitlement - view and export Inventory - view, edit, delete and export Associations |
Compliance Administrator | Create, update, delete and view AppClarity Compliance, Entitlement and License Demand - view AppClarity Reclaim - view and export Inventory - view, edit, delete and export Associations |
Compliance Viewer | View only AppClarity Compliance, Entitlement and License Demand |
AppClarity screen access and actions per role
In this section we will define the screens and actions that each Role will be able to access, and what actions are available, the actual function of each screen and action is detailed in the later pages.
AppClarity Administrator
This user is not able to assign roles in the settings application
Screen | Actions | View only |
|---|---|---|
Entitlements - Summary Report | Refresh Report | Yes |
Entitlements - Licenses / Maintenances | New License, New Maintenance, Edit, Publish, Clone, Move to Draft, Delete, Components, Export, Refresh Report | No |
Entitlements - Licenses / Maintenances - Links popup | No actions possible on this screen | Yes |
Entitlements - Licenses / Maintenances - Vendor popup | No actions possible on this screen | Yes |
Entitlements - Licenses / Maintenances - New License | Publish, Save Draft, Cancel | No |
Entitlements - Licenses / Maintenances - New Maintenance | Publish, Save Draft, Cancel | No |
Entitlements - Licenses / Maintenances - Edit License | Publish, Save Draft, Cancel | No |
Entitlements - Licenses / Maintenances - Clone | Publish, Save Draft, Cancel | No |
Entitlements - Licenses / Maintenances - Components | No actions possible on this screen | No |
Entitlements - Agreements | New Agreement, Edit, Publish, Clone, Move to Draft, Delete, Export, Refresh Report | No |
Entitlements - Agreements - Links popup | No actions possible on this screen | Yes |
Entitlements - Agreements - New Agreement | Publish, Save Draft, Cancel | No |
Entitlements - Agreements - Edit | Publish, Save Draft, Cancel | No |
Entitlements - Agreements - Clone | Publish, Save Draft, Cancel | No |
Entitlements - Contracts | New Contract, Edit, Delete, Export, Refresh Report | No |
Entitlements - Contracts - New Contract | Publish, Save Draft, Cancel | No |
Entitlements - Contracts - Edit | Save, Cancel | No |
Compliance - License Summary | Add License, Add Reclaim Policy, Export, Refresh Report | No |
Compliance - License Summary - Summary by Installs (visible by clicking on Compliance Category bar) | Export | No |
Compliance - License Summary - Add License | Publish, Save Draft, Cancel | No |
Compliance - License Summary - Add Reclaim Policy | Evaluate, Save Draft, Publish, Cancel | No |
Compliance - License Position | Export, Compliance Details, Refresh Report | No |
License Demand | View Report, Refresh | No |
License Demand - Microsoft Core License Demand | Show Detailed Report | No |
License Demand - Microsoft Core License Demand - Detailed Report | Export | No |
License Demand - IBM Processor Value Unit (PVU) License Demand | Show Detailed Report | No |
License Demand - IBM Processor Value Unit (PVU) License Demand - Detailed Report | Export | No |
License Demand - Oracle Processor License Demand | Show Detailed Report | No |
License Demand - Oracle Processor License Demand - Detailed Report | Export | No |
License Demand - Red Hat Socket License Demand | Show Detailed Report | No |
License Demand - Red Hat Socket License Demand - Detailed Report | Export | No |
Reclaim - Usage Summary | Add Policy, Export, Refresh Report | No |
Reclaim - Usage Summary - New Policy | Evaluate, Save Draft, Publish, Cancel | No |
Reclaim - Reclaim History | Export, Refresh Report | No |
Reclaim - Policies | New Policy, Edit, Publish, Clone, Move to Draft, Delete,Manage Associations, Export, Refresh Report | No |
Reclaim - Policies - New Policy | Evaluate, Save Draft, Publish, Cancel | No |
Reclaim - Policies - Edit Policy | Evaluate, Save Draft, Publish, Cancel | No |
Reclaim - Policies - Cloned Policy | Evaluate, Save Draft, Publish, Cancel | No |
Reclaim - Policies - Manage Associations | Opens the Inventory - Manage Associations - Product to CM Screen with the Reclaimable filter selected Add Association, Edit Association and Remove Association Buttons are disabled unless a Reclaim has been created | No |
Reclaim - Savings | Export, Refresh Report | No |
Reclaim Administrator
This user is not able to assign roles in the settings application
Screen | Actions | View only |
|---|---|---|
Reclaim - Usage Summary | Add Policy, Export, Refresh Report | No |
Reclaim - Usage Summary - New Policy | Evaluate, Save Draft, Publish, Cancel | No |
Reclaim - Reclaim History | Export, Refresh Report | No |
Reclaim - Policies | New Policy, Edit, Publish, Clone, Move to Draft, Delete, Manage Associations, Export, Refresh Report | No |
Reclaim - Policies - New Policy | Evaluate, Save Draft, Publish, Cancel | No |
Reclaim - Policies - Edit Policy | Evaluate, Save Draft, Publish, Cancel | No |
Reclaim - Policies - Cloned Policy | Evaluate, Save Draft, Publish, Cancel | No |
Reclaim - Policies - Manage Associations | Opens the Inventory - Manage Associations - Product to CM Screen with the Reclaimable filter selected Add Association, Edit Association and Remove Association Buttons are disabled unless a Reclaim has been created | No |
Reclaim - Savings | Export, Refresh Report | No |
Compliance - License Summary - Add Reclaim Policy | Add Policy | No |
Reclaim Viewer
This user is not able to assign roles in the settings application
Screen | Actions | View only |
|---|---|---|
Reclaim - Usage Summary | No actions possible on this screen | Yes |
Reclaim - Reclaim History | No actions possible on this screen | Yes |
Reclaim - Policies | Manage Associations | No |
Reclaim - Policies - Manage Associations | Opens the Inventory - Manage Associations - Product to CM Screen with the Reclaimable filter selected No actions possible on this screen | Yes |
Reclaim - Savings | No actions possible on this screen | Yes |
Entitlement Administrator
This user is not able to assign roles in the settings application
Screen | Actions | View only |
|---|---|---|
Entitlements - Summary Report | Refresh Report | No |
Entitlements - Licenses / Maintenances | New License, New Maintenance, Edit, Publish, Clone, Move to Draft, Delete, Components, Export, Refresh Report | No |
Entitlements - Licenses / Maintenances - Links popup | No actions possible on this screen | Yes |
Entitlements - Licenses / Maintenances - Vendor popup | No actions possible on this screen | Yes |
Entitlements - Licenses / Maintenances - New License | Publish, Save Draft, Cancel | No |
Entitlements - Licenses / Maintenances - New Maintenance | Publish, Save Draft, Cancel | No |
Entitlements - Licenses / Maintenances - Edit License | Publish, Save Draft, Cancel | No |
Entitlements - Licenses / Maintenances - Clone | Publish, Save Draft, Cancel | No |
Entitlements - Licenses / Maintenances - Components | No actions possible on this screen | No |
Entitlements - Agreements | New Agreement, Edit, Publish, Clone, Move to Draft, Delete, Export, Refresh Reports | No |
Entitlements - Agreements - Links popup | No actions possible on this screen | Yes |
Entitlements - Agreements - New Agreement | Publish, Save Draft, Cancel | No |
Entitlements - Agreements - Edit | Publish, Save Draft, Cancel | No |
Entitlements - Agreements - Clone | Publish, Save Draft, Cancel | No |
Entitlements - Contracts | New Contract, Edit, Delete, Export, Refresh Reports | No |
Entitlements - Contracts - New Contract | Save, Cancel | No |
Entitlements - Contracts - Edit | Save, Cancel | No |
Compliance Administrator
This user is not able to assign roles in the settings application
Screen | Actions | View only |
|---|---|---|
Entitlements - Summary Report | Refresh Report | No |
Entitlements - Licenses / Maintenances | New License, New Maintenance, Edit, Publish, Clone, Move to Draft, Delete, Components, Export, Refresh Report | No |
Entitlements - Licenses / Maintenances - Links popup | No actions possible on this screen | Yes |
Entitlements - Licenses / Maintenances - Vendor popup | No actions possible on this screen | Yes |
Entitlements - Licenses / Maintenances - New License | Publish, Save Draft, Cancel | No |
Entitlements - Licenses / Maintenances - New Maintenance | Publish, Save Draft, Cancel | No |
Entitlements - Licenses / Maintenances - Edit License | Publish, Save Draft, Cancel | No |
Entitlements - Licenses / Maintenances - Clone | Publish, Save Draft, Cancel | No |
Entitlements - Licenses / Maintenances - Components | No actions possible on this screen | No |
Entitlements - Agreements | New Agreement, Edit, Publish, Clone, Move to Draft, Delete, Export, Refresh Report | No |
Entitlements - Agreements - Links popup | No actions possible on this screen | Yes |
Entitlements - Agreements - New Agreement | Publish, Save Draft, Cancel | No |
Entitlements - Agreements - Edit | Publish, Save Draft, Cancel | No |
Entitlements - Agreements - Clone | Publish, Save Draft, Cancel | No |
Entitlements - Contracts | New Contract, Edit, Delete, Export, Refresh Report | No |
Entitlements - Contracts - New Contract | Publish, Save Draft, Cancel | No |
Entitlements - Contracts - Edit | Save, Cancel | No |
Compliance - License Summary | Add License, Add Reclaim Policy, Export, Refresh Report | No |
Compliance - License Summary - Summary by Installs (visible by clicking on Compliance Category bar) | Export | No |
Compliance - License Summary - Add License | Publish, Save Draft, Cancel | No |
Compliance - License Summary - Add Reclaim Policy | Evaluate, Save Draft, Publish, Cancel | No |
Compliance - License Position | Export, Compliance Details, Refresh Report | No |
License Demand | View Report, Refresh | No |
License Demand - Microsoft Core License Demand | Show Detailed Report | No |
License Demand - Microsoft Core License Demand - Detailed Report | Export | No |
License Demand - IBM Processor Value Unit (PVU) License Demand | Show Detailed Report | No |
License Demand - IBM Processor Value Unit (PVU) License Demand - Detailed Report | Export | No |
License Demand - Oracle Processor License Demand | Show Detailed Report | No |
License Demand - Oracle Processor License Demand - Detailed Report | Export | No |
License Demand - Red Hat Socket License Demand | Show Detailed Report | No |
License Demand - Red Hat Socket License Demand - Detailed Report | Export | No |
Reclaim - Usage Summary | No actions possible on this screen | Yes |
Reclaim - Reclaim History | No actions possible on this screen | Yes |
Reclaim - Policies | Manage Associations | No |
Reclaim - Policies - Manage Associations | Opens the Inventory - Manage Associations - Product to CM Screen with the Reclaimable filter selected Add Association, Edit Association and Remove Association Buttons are disabled unless a Reclaim has been created | No |
Inventory - Manage Associations - Product to CM | Add Association, Edit Association, Remove Association | No |
Reclaim - Savings | No actions possible on this screen | Yes |
Compliance Viewer
This user is not able to assign roles in the settings application
Screen | Actions | View only |
|---|---|---|
Entitlements - Summary Report | No actions possible on this screen | Yes |
Entitlements - Licenses / Maintenances | No actions possible on this screen | Yes |
Entitlements - Licenses / Maintenances - Links popup | No actions possible on this screen | Yes |
Entitlements - Licenses / Maintenances - Vendor popup | No actions possible on this screen | Yes |
Entitlements - Agreements | No actions possible on this screen | Yes |
Entitlements - Agreements - Links popup | No actions possible on this screen | Yes |
Entitlements - Contracts | No actions possible on this screen | Yes |
Compliance - License Summary | No actions possible on this screen | Yes |
Compliance - License Summary - Summary by Installs (visible by clicking on Compliance Category bar) | No actions possible on this screen | Yes |
Compliance - License Position | No actions possible on this screen | Yes |
License Demand | View Report | No |
License Demand - Microsoft Core License Demand | No actions possible on this screen | Yes |
License Demand - IBM Processor Value Unit (PVU) License Demand | No actions possible on this screen | Yes |
License Demand - Oracle Processor License Demand | No actions possible on this screen | Yes |
License Demand - Red Hat Socket License Demand | No actions possible on this screen | Yes |