User role profiles in System Center - Service Manager
This article provides detailed information about the scope and properties of user role profiles in System Center - Service Manager.
Tabs in the Administrator console
The table below shows the tabs and order that they appear in the console.
| User roles | Tab order in Console |
|---|---|
| activity implementer | 1. Work Items 2. Configurations |
| advanced operator | 1. Library 2. Work Items 3. Configurations |
| author | 1. Library 2. Work Items 3. Configurations |
| change initiator | 1. Work Items 2. Configurations |
| change manager | 1. Work Items 2. Configurations |
| incident resolver | 1. Work Items 2. Configurations |
| problem analysts | 1. Work Items 2. Configurations |
| Read Only operator | 1. Work Items 2. Configurations |
| Release Manager | 1. Work Items 2. Configurations |
| Service Request Analyst | 1. Work Items 2. Configurations |
| Workflow | 1. Work Items 2. Configurations |
Default user roles
| action | allowed roles |
|---|---|
| read knowledge articles | activity implementer, advanced operator, author, change initiator, change manager, end user, incident resolver, problem analyst, read only operator, release manager, service request analyst, workflow |
| edit knowledge articles | advanced operator, author |
| create knowledge articles | advanced operator, author |
| delete knowledge article | advanced operator, author |
| create change requests and activities | activity implementer, advanced operator, author, change initiator, change manager, incident resolver, problem analyst, read only operator, release manager, service request analyst, workflow |
| create incident and activities | activity implementer, advanced operator, author, change initiator, change manager, incident resolver, problem analyst, read only operator, release manager, service request analyst, workflow |
| create problem records | activity implementer, advanced operator, author, change initiator, change manager, incident resolver, problem analyst, read only operator, release manager, service request analyst, workflow |
| create release records | activity implementer, advanced operator, author, change initiator, change manager, incident resolver, problem analyst, read only operator, release manager, service request analyst, workflow |
| create service requests and activities | activity implementer, advanced operator, author, change initiator, change manager, incident resolver, problem analyst, read only operator, release manager, service request analyst, workflow |
| edit change requests | advanced operator, author, change manager, workflow |
| edit incidents | advanced operator, author, incident resolver, workflow |
| edit problem records | advanced operator, author, problem analyst, workflow |
| edit release records | advanced operator, author, release manager, workflow |
| edit service requests | advanced operator, author, service request analyst, workflow |
| update status for change requests | advanced operator, author, change manager, workflow |
| update status for incidents | advanced operator, author, incident resolver, workflow |
| update status for problem records | advanced operator, author, problem analyst, workflow |
| update status for release records | advanced operator, author, release manager, workflow |
| update status for service requests | advanced operator, author, service request analyst, workflow |
| update status for manual activity | advanced operator, author, change manager, incident resolver, release manager, service request analyst, workflow |
| update status for review activity | advanced operator, author, change manager, release manager, service request analyst, workflow |
| create CIs | advanced operator, author, workflow |
| update CIs | advanced operator, author, workflow |
| delete CIs | advanced operator, author, workflow |
| create user preference | activity implementer, advanced operator, author, change initiator, change manager, incident resolver, problem analyst, read only operator, release manager, service request analyst, workflow |
| update user preference | They can update them self only. Say Activity implementer user login as "ABC1" user, then he can update "ABC1" only. Same with all the user roles. |
Default user role relationships in Service Manager
WorkItemAboutConfigItem -> ConfigurationItem
- change requests - advanced operator, author, change manager, workflow
- incident records - advanced operator, author, incident resolver, workflow
- problem records - advanced operator, author, problem analyst, workflow
- release record - advanced operator, author, release manager, workflow
- service request - advanced operator, author, service request analyst, workflow
WorkItemRelatesToConfigItem > ConfigurationItem
- change request – advanced operator, author, change manager, workflow
- incident record – advanced operator, author, incident resolver, workflow
- problem record – advanced operator, author, problem analyst, workflow
- release record – advanced operator, author, release manager, workflow
- service request – advanced operator, author, service request analyst, workflow
EntityLinksToKnowledgeDocument > ConfigurationItem
- change request – advanced operator, author, change manager, workflow
- incident record – advanced operator, author, incident resolver, workflow
- problem record – advanced operator, author, problem analyst, workflow
- release record – advanced operator, author, release manager, workflow
- service request – advanced operator, author, service request analyst, workflow
WorkItemRelatesToWorkItem > WorkItem
- change request – advanced operator, author, change manager, workflow
- incident record – advanced operator, author, incident resolver, workflow
- problem record – advanced operator, author, problem analyst, workflow
- release record – advanced operator, author, release manager, workflow
- service request – advanced operator, author, service request analyst, workflow
WorkItemAffectedUser
- incident record – advanced operator, author, incident resolver, workflow
- service request – advanced operator, author, service request analyst, workflow
WorkItemAssignedToUser
- change request – advanced operator, author, change manager, workflow
- incident record – advanced operator, author, incident resolver, workflow
- problem record - advanced operator, author, problem analyst, workflow
- release record - advanced operator, author, release manager, workflow
- service request - advanced operator, author, service request analyst, workflow
FileAttachmentAddedByUser
- change request – advanced operator, author, change manager, workflow
- incident record – advanced operator, author, incident resolver, workflow
- problem record - advanced operator, author, problem analyst, workflow
- release record - advanced operator, author, release manager, workflow
- service request - advanced operator, author, service request analyst, workflow
BillableTimeHasWorkingUser
- incident record – advanced operator, author, incident resolver, workflow
IncidentPrimaryOwner
- incident record - advanced operator, author, incident resolver, workflow
TroubleTicketResolvedByUser
- change request – advanced operator, author, change manager, workflow
- incident record – advanced operator, author, incident resolver, workflow
- problem record - advanced operator, author, problem analyst, workflow
- release record - advanced operator, author, release manager, workflow
- service request - advanced operator, author, service request analyst, workflow
TroubleTicketClosedByUser
- change request – advanced operator, author, change manager, workflow
- incident record – advanced operator, author, incident resolver, workflow
- problem record - advanced operator, author, problem analyst, workflow
- release record - advanced operator, author, release manager, workflow
- service request - advanced operator, author, service request analyst, workflow
ReviewerIsUser
- review activity - advanced operator, author, change manager, release manager, service request analyst, workflow
ReviewerVotedByUse
- review activity - advanced operator, author, change manager, release manager, service request analyst, workflow
WorkItemRelatesToRequestOffering > RequestOffering
- advanced operator
- author
ServiceOfferingRelatesToRequestOffering > RequestOffering
- advanced operator
- author
Implied permissions
The following are implied permissions for Service Manager.
ImpliedIncidentAffectedUser
The permissions for the implied Affected User profile are granted through the WorkItemAffectedUser relationship.
| Operation | Type | Property | Relationship |
|---|---|---|---|
| Read | Incident or service request instances, and anything that is contained within. | All properties of an incident instance. | All relationships that include the incident or service request instance. |
| Create | Work items that the user is affected by: - Work item log - File attachment |
All properties of a work item log and a file attachment for the incident or service request instance. | File attachment for an incident or service request instance. |
| Update | Work items that the user is affected by: - Incident - Service request - Work item log - File attachment |
All properties of an incident or service request instance. | Incident instance BillableTimeHasWorkingUser->User. |
| Delete | Work item that the user is affected by - File attachment | File attachment for an incident or service request instance. | File attachment for an incident or service request instance. |
ImpliedReviewer
The permissions for the implied Review Activity Reviewer profile are granted through the ReviewerIsUser relationship.
| Operation | Type | Property | Relationship |
|---|---|---|---|
| Read | Reviewer instances and anything that is contained within. | All properties of a Reviewer instances and anything that is contained within. | All relationships that include the Reviewer instance, and anything that is contained within. |
| Create | None | None | None |
| Update | None | Reviewer instances: - Reviewer.Comments - Reviewer.DecisionDate - Reviewer.Decision |
Reviewer Instances: - ReviewerVotedByUser->User - ReviewerVotedByUser->Reviewer |
| Delete | None | None | None |
ImpliedActivityEditor
The permissions for the implied Assigned To User profile are granted through the WorkItemAssignedToUser relationship.
| Operation | Type | Property | Relationship |
|---|---|---|---|
| Read | Activity instances and anything that is contained in it. | None | None |
| Create | Work item instances that the user is assigned to: - Activity - Reviewer |
All properties of Activity and Reviewer instances that are related to a work item instance. | All the Activity and Reviewer instances that are related to a work item Instance. |
| Update | Work item instances that the user is assigned to: Activity | All properties of an activity and the work item instances. | All Activity instances that are related to the work item Instance. |
| Delete | None | None | None |
ImpliedConfigItemCustodian
The permissions for the implied CI Owner profile are granted through the ConfigItemOwnedByUser relationship.
| Operation | Type | Property | Relationship |
|---|---|---|---|
| Read | Configuration item instances and anything that is contained within. | All properties of a configuration item instance and anything that is contained in it. | All relationships that include a configuration item instance, and anything that is contained in it. |
| Create | None | None | None |
| Update | None | None | Configuration item Instance - WorkItemAboutConfigItem |
| Delete | None | None | None |
ImpliedPrimaryComputerUser
The permissions for the implied CI Primary User profile are granted through the ComputerPrimaryUser relationship.
| Operation | Type | Property | Relationship |
|---|---|---|---|
| Read | Configuration item instances and anything that is contained within. | All properties of a configuration item instance and anything that is contained within. | All relationships that include the configuration item instance and anything that is contained within. |
| Create | None | None | None |
| Update | None | None | None |
| Delete | None | None | None |