AppClarity supports Role Based Access Control (RBAC). RBAC allows a Tachyon Administrator to allocate specific AppClarity based roles to different users, thereby enabling access and actions to the screens those users need to carry out their roles. This avoids unwanted access being permitted to SAM team members outside of their role, ensuring data security and improving governance.

There are pre-defined roles with sets of permissions aimed at particular SAM user types. Tachyon Administrators can assign any of these AppClarity based roles to any AD domain user.

Typically you would install AppClarity using the the Tachyon installation account. This role has purposefully limited permissions, but is able to add new Tachyon users and assign roles to those users. So after installing AppClarity one of the first steps would be to add the AppClarity Administrator role to an existing or new Tachyon user and then continue with the verification steps to confirm that AppClarity has been successfully installed. Please refer to Verifying for more details.

After the AppClarity installation has been verified you would then have the ongoing task of identifying your SAM users adding them as Tachyon users and assigning their AppClarity roles to allow them to carry out their SAM duties.


AppClarity permissions are granted on a module level (for example, Entitlement, Reclaim or Compliance) and not at per screen level (such as Entitlement→Summary Report or Reclaim→Savings), for example:

  1. A Tachyon Administrator has a request for a Reclaim Viewer to only view the EntitlementSummary Report
  2. The Tachyon Administrator assigns the role of Entitlement Administrator to the Reclaim Viewer.
  3. The Reclaim Viewer would be able to view all screens under Entitlement module, not just the requested screen, EntitlementSummary Report.
On this page:

Pre-defined AppClarity roles

The pre-defined roles are:

RoleActions
AppClarity AdministratorCreate, update, delete and view AppClarity Compliance, Entitlement, License Demand and Reclaim - view and export Inventory - view, edit, delete and export Associations
Reclaim AdministratorCreate, update, delete and view AppClarity Reclaim - view and export Inventory - view, edit, delete and export Associations
Reclaim ViewerView only AppClarity Reclaims 
Entitlement AdministratorCreate, update, delete and view AppClarity Entitlement - view and export Inventory - view, edit, delete and export Associations
Compliance AdministratorCreate, update, delete and view AppClarity Compliance, Entitlement and License Demand - view AppClarity Reclaim - view and export Inventory - view, edit, delete and export Associations
Compliance ViewerView only AppClarity Compliance, Entitlement and License Demand

AppClarity screen access and actions per role

In this section we will define the screens and actions that each Role will be able to access, and what actions are available, the actual function of each screen and action is detailed in the later pages.

AppClarity Administrator

This user is not able to assign roles in the settings application

ScreenActionsView only
Entitlements - Summary ReportRefresh ReportYes
Entitlements - Licenses / MaintenancesNew License, New Maintenance, Edit, Publish, Clone, Move to Draft, Delete, Components, Export, Refresh ReportNo
Entitlements - Licenses / Maintenances - Links popupNo actions possible on this screenYes
Entitlements - Licenses / Maintenances - Vendor popupNo actions possible on this screenYes
Entitlements - Licenses / Maintenances - New LicensePublish, Save Draft, CancelNo
Entitlements - Licenses / Maintenances - New MaintenancePublish, Save Draft, CancelNo
Entitlements - Licenses / Maintenances - Edit LicensePublish, Save Draft, CancelNo
Entitlements - Licenses / Maintenances - ClonePublish, Save Draft, CancelNo
Entitlements - Licenses / Maintenances - ComponentsNo actions possible on this screenNo
Entitlements - AgreementsNew Agreement, Edit, Publish, Clone, Move to Draft, Delete, Export, Refresh ReportNo
Entitlements - Agreements - Links popupNo actions possible on this screenYes
Entitlements - Agreements - New AgreementPublish, Save Draft, CancelNo
Entitlements - Agreements - EditPublish, Save Draft, CancelNo
Entitlements - Agreements - ClonePublish, Save Draft, CancelNo
Entitlements - ContractsNew Contract, Edit, Delete, Export, Refresh ReportNo
Entitlements - Contracts - New ContractPublish, Save Draft, CancelNo
Entitlements - Contracts - EditSave, CancelNo
Compliance - License SummaryAdd License, Add Reclaim Policy, Export, Refresh ReportNo
Compliance - License Summary - Summary by Installs (visible by clicking on Compliance Category bar)ExportNo
Compliance - License Summary - Add LicensePublish, Save Draft, CancelNo
Compliance - License Summary - Add Reclaim PolicyEvaluate, Save Draft, Publish, CancelNo
Compliance - License PositionExport, Compliance Details, Refresh ReportNo
License DemandView Report, RefreshNo
License Demand - Microsoft Core License DemandShow Detailed ReportNo
License Demand - Microsoft Core License Demand - Detailed ReportExportNo
License Demand - IBM Processor Value Unit (PVU) License DemandShow Detailed ReportNo
License Demand - IBM Processor Value Unit (PVU) License Demand - Detailed ReportExportNo
License Demand - Oracle Processor License DemandShow Detailed ReportNo
License Demand - Oracle Processor License Demand - Detailed ReportExportNo
License Demand - Red Hat Socket License DemandShow Detailed ReportNo
License Demand - Red Hat Socket License Demand - Detailed ReportExportNo
Reclaim - Usage SummaryAdd Policy, Export, Refresh ReportNo
Reclaim - Usage Summary - New PolicyEvaluate, Save Draft, Publish, Cancel
No
Reclaim - Reclaim HistoryExport, Refresh ReportNo
Reclaim - PoliciesNew Policy, Edit, Publish, Clone, Move to Draft, Delete,Manage Associations, Export, Refresh ReportNo
Reclaim - Policies - New PolicyEvaluate, Save Draft, Publish, CancelNo
Reclaim - Policies - Edit PolicyEvaluate, Save Draft, Publish, CancelNo
Reclaim - Policies - Cloned PolicyEvaluate, Save Draft, Publish, CancelNo
Reclaim - Policies - Manage AssociationsOpens the Inventory - Manage Associations - Product to CM Screen with the Reclaimable filter selected Add Association, Edit Association and Remove Association Buttons are disabled unless a Reclaim has been createdNo
Reclaim - SavingsExport, Refresh ReportNo

Reclaim Administrator

This user is not able to assign roles in the settings application

ScreenActionsView only
Reclaim - Usage SummaryAdd Policy, Export, Refresh ReportNo
Reclaim - Usage Summary - New PolicyEvaluate, Save Draft, Publish, CancelNo
Reclaim - Reclaim HistoryExport, Refresh ReportNo
Reclaim - PoliciesNew Policy, Edit, Publish, Clone, Move to Draft, Delete, Manage Associations, Export, Refresh ReportNo
Reclaim - Policies - New PolicyEvaluate, Save Draft, Publish, CancelNo
Reclaim - Policies - Edit PolicyEvaluate, Save Draft, Publish, CancelNo
Reclaim - Policies - Cloned PolicyEvaluate, Save Draft, Publish, CancelNo
Reclaim - Policies - Manage AssociationsOpens the Inventory - Manage Associations - Product to CM Screen with the Reclaimable filter selected Add Association, Edit Association and Remove Association Buttons are disabled unless a Reclaim has been createdNo
Reclaim - SavingsExport, Refresh ReportNo
Compliance - License Summary - Add Reclaim PolicyAdd PolicyNo

Reclaim Viewer

This user is not able to assign roles in the settings application

ScreenActionsView only
Reclaim - Usage SummaryNo actions possible on this screenYes
Reclaim - Reclaim HistoryNo actions possible on this screenYes
Reclaim - PoliciesManage AssociationsNo
Reclaim - Policies - Manage AssociationsOpens the Inventory - Manage Associations - Product to CM Screen with the Reclaimable filter selected No actions possible on this screenYes
Reclaim - SavingsNo actions possible on this screenYes

Entitlement Administrator

This user is not able to assign roles in the settings application

ScreenActionsView only
Entitlements - Summary ReportRefresh ReportNo
Entitlements - Licenses / MaintenancesNew License, New Maintenance, Edit, Publish, Clone, Move to Draft, Delete, Components, Export, Refresh ReportNo
Entitlements - Licenses / Maintenances - Links popupNo actions possible on this screenYes
Entitlements - Licenses / Maintenances - Vendor popupNo actions possible on this screenYes
Entitlements - Licenses / Maintenances - New LicensePublish, Save Draft, CancelNo
Entitlements - Licenses / Maintenances - New MaintenancePublish, Save Draft, CancelNo
Entitlements - Licenses / Maintenances - Edit LicensePublish, Save Draft, CancelNo
Entitlements - Licenses / Maintenances - ClonePublish, Save Draft, CancelNo
Entitlements - Licenses / Maintenances - ComponentsNo actions possible on this screenNo
Entitlements - AgreementsNew Agreement, Edit, Publish, Clone, Move to Draft, Delete, Export, Refresh ReportsNo
Entitlements - Agreements - Links popupNo actions possible on this screenYes
Entitlements - Agreements - New AgreementPublish, Save Draft, CancelNo
Entitlements - Agreements - EditPublish, Save Draft, CancelNo
Entitlements - Agreements - ClonePublish, Save Draft, CancelNo
Entitlements - ContractsNew Contract, Edit, Delete, Export, Refresh ReportsNo
Entitlements - Contracts - New ContractSave, CancelNo
Entitlements - Contracts - EditSave, CancelNo

Compliance Administrator

This user is not able to assign roles in the settings application

ScreenActionsView only
Entitlements - Summary ReportRefresh ReportNo
Entitlements - Licenses / MaintenancesNew License, New Maintenance, Edit, Publish, Clone, Move to Draft, Delete, Components, Export, Refresh ReportNo
Entitlements - Licenses / Maintenances - Links popupNo actions possible on this screenYes
Entitlements - Licenses / Maintenances - Vendor popupNo actions possible on this screenYes
Entitlements - Licenses / Maintenances - New LicensePublish, Save Draft, CancelNo
Entitlements - Licenses / Maintenances - New MaintenancePublish, Save Draft, CancelNo
Entitlements - Licenses / Maintenances - Edit LicensePublish, Save Draft, CancelNo
Entitlements - Licenses / Maintenances - ClonePublish, Save Draft, CancelNo
Entitlements - Licenses / Maintenances - ComponentsNo actions possible on this screenNo
Entitlements - AgreementsNew Agreement, Edit, Publish, Clone, Move to Draft, Delete, Export, Refresh ReportNo
Entitlements - Agreements - Links popupNo actions possible on this screenYes
Entitlements - Agreements - New AgreementPublish, Save Draft, CancelNo
Entitlements - Agreements - EditPublish, Save Draft, CancelNo
Entitlements - Agreements - ClonePublish, Save Draft, CancelNo
Entitlements - ContractsNew Contract, Edit, Delete, Export, Refresh ReportNo
Entitlements - Contracts - New ContractPublish, Save Draft, CancelNo
Entitlements - Contracts - EditSave, CancelNo
Compliance - License SummaryAdd License, Add Reclaim Policy, Export, Refresh ReportNo
Compliance - License Summary - Summary by Installs (visible by clicking on Compliance Category bar)ExportNo
Compliance - License Summary - Add LicensePublish, Save Draft, CancelNo
Compliance - License Summary - Add Reclaim PolicyEvaluate, Save Draft, Publish, CancelNo
Compliance - License PositionExport, Compliance Details, Refresh ReportNo
License DemandView Report, RefreshNo
License Demand - Microsoft Core License DemandShow Detailed ReportNo
License Demand - Microsoft Core License Demand - Detailed ReportExportNo
License Demand - IBM Processor Value Unit (PVU) License DemandShow Detailed ReportNo
License Demand - IBM Processor Value Unit (PVU) License Demand - Detailed ReportExportNo
License Demand - Oracle Processor License DemandShow Detailed ReportNo
License Demand - Oracle Processor License Demand - Detailed ReportExportNo
License Demand - Red Hat Socket License DemandShow Detailed ReportNo
License Demand - Red Hat Socket License Demand - Detailed ReportExportNo
Reclaim - Usage SummaryNo actions possible on this screenYes
Reclaim - Reclaim HistoryNo actions possible on this screenYes
Reclaim - PoliciesManage AssociationsNo
Reclaim - Policies - Manage AssociationsOpens the Inventory - Manage Associations - Product to CM Screen with the Reclaimable filter selected Add Association, Edit Association and Remove Association Buttons are disabled unless a Reclaim has been createdNo
Inventory - Manage Associations - Product to CMAdd Association, Edit Association, Remove AssociationNo
Reclaim - SavingsNo actions possible on this screenYes

Compliance Viewer

This user is not able to assign roles in the settings application

ScreenActionsView only
Entitlements - Summary ReportNo actions possible on this screenYes
Entitlements - Licenses / MaintenancesNo actions possible on this screenYes
Entitlements - Licenses / Maintenances - Links popupNo actions possible on this screenYes
Entitlements - Licenses / Maintenances - Vendor popupNo actions possible on this screenYes
Entitlements - AgreementsNo actions possible on this screenYes
Entitlements - Agreements - Links popupNo actions possible on this screenYes
Entitlements - ContractsNo actions possible on this screenYes
Compliance - License SummaryNo actions possible on this screenYes
Compliance - License Summary - Summary by Installs (visible by clicking on Compliance Category bar)No actions possible on this screenYes
Compliance - License PositionNo actions possible on this screenYes
License DemandView ReportNo
License Demand - Microsoft Core License DemandNo actions possible on this screenYes
License Demand - IBM Processor Value Unit (PVU) License DemandNo actions possible on this screenYes
License Demand - Oracle Processor License DemandNo actions possible on this screenYes
License Demand - Red Hat Socket License DemandNo actions possible on this screenYes