Authorization Roles

Authorization Roles

Common

-Common.Base Actions	Rights to perform base actions such as openCatalog, print, export, etc.
-Common.Organizational Read	Rights to read all organizational data
-Common.Organizational Write	Rights to create, update and delete all organizational data. (Note that interfaces are handled outside authorizations, which means that an interface can e.g. create and update data even if the interface user is not part of this authorization role.)
-Common.Commercial Read	Rights to read all commercial data
-Common.Commercial Write	Rights to create, update and delete all commercial data. (Interfaces are handled outside authorizations, see .Organizational Write above)
-Common.Technical Read	Rights to read all technical data
-Common.Technical Write	Rights to create, update and delete all technical data. (Interfaces are handled outside authorizations, see .Organizational Write above)
-Common.Ticket Read	Rights to generally work with tickets, activities and ticket descriptions (read base/underlying data, not objects themselves)

Asset Management

-Asm.Asset Basic Read	Rights to read all information in this area (incl. print)
-Asm.Asset Initiation	Rights to initiate (create) new IT Assets (incl. technical incoming goods)
-Asm.Asset Support	Rights to do the operational work in this area (such as system move, system configuration); incl. catalog export to text file, mass edit, switch to complex search
-Asm.Asset Management	Rights to do management work, such as reports, prints, etc.

Config Management

-Com.Config Basic Read	Rights to read all information in this area (incl. print)
-Com.Config Initiation	Rights to initiate (create) new CIs (inventory items)
-Com.Config Support	Rights to do operational work in this area (such as compare rules); incl. catalog export to text file, mass edit, switch to complex search
-Com.Config Management	Rights to do management work in this area (such as approvals, reports, prints, master rules)

Change Management

-Chm.Change Basic Read	Rights to read all ticket information in this area (incl. print)
-Chm.Change Initiation	Rights to initiate new RFC/Change tickets. The role 'Change Initiatior (CI)' has the following tasks: - Create and describe RFCs (Request for Change) - Be available for questions from the change manager to specify ticket content and schedule
-Chm.Change Support	Rights to do the operational work in this area. The role 'Change Support (CS)' has the following tasks: - Support of Change Manager in all areas - Provide needed skills from different function areas - Receive RFCs and protocols - Cooperate with creators (CIs) on RFCs prioritization - Change Builder tasks - Monitor builds of new software versions - Prepare hardware changes - Initiate the procurement of equipment or external services - Monitor the creation of test cases - Monitor the creation of back-out plans - Monitor the creation of documentation - Monitor the preparation of user training
-Chm.Change Management	Rights to do the management work in this area, such as approvals, reports, prints. The role 'Change Management (CM)' has the following tasks: - Overall responsibility for the change process, i.e. for all process activities (in practice there is always a team) - Authorization of changes - Using FSC (Forward of Changes) as a controlling tool - Working with KPIs (publish KPIs via Service Desk) - Planning PSA (Project Service Availability) - Control Planning, testing, introduction and time-controlling of changes - Review of executed changes and still opened RFCs - Creation of trend-analysis (based on existing data)

Problem Management

-Prm.Problem Basic Read	Rights to read all ticket information in this area (incl. print and export to text file)
-Prm.Problem Initiation	Rights to initiate new Problem tickets
-Prm.Problem Support	Rights to do the operational work in this area, incl. creation of new Workarounds
-Prm.Problem Management	Rights to do the management work in this area, such as approvals, reports, prints, etc.

Incident Management

-Inm.Incident Basic Read	Rights to read all ticket information in this area (incl. print)
-Inm.End User Incident Initiation	Rights to initiate new Incident and SR tickets for themselves
-Inm.Incident Initiation	Rights to do initiate new Calls, Incident and SR tickets for themselves or others
-Inm.Incident Re-Initiation	Right to re-open completed Incidents
-Inm.Incident Support	Rights to do the operational work in this area (such as forwarding, solving, closing, opening Incidents and SRs); incl. catalog export to text file, mass edit, switch to complex search, cancel tickets, change default supportgroup
-Inm.Incident Management	Rights to do the management work in this area, such as approvals, reports, prints, etc.

Call Managemt

-Inm.Call Acceptance

Rights to do the call acceptance for the 1st level support

Knowledge Management

-Knm.Knowledge Solution Search	Rights to search in the Knowledge DB for solutions
-Knm.Knowledge Solution Creation	Rights to suggest / create solutions for the Knowledge DB
-Knm.Knowledge Messaging	Rights to use the message function in Knowledge Center (Ticker)
-Knm.Knowledge Document Search	Rights to search in the Knowledge DB for documents

Service Request Management

-Srm.Service Request Basic Read	Rights to read all process information in this area (incl. print)
-Srm.End User Service Requesting	Rights to do initiate new Service Requests out of the PSC (for self-service)
-Srm.Service Request Initiation	Rights to initiate new Service Requests out of the PSC (for self-service or other users)
-Srm.Service Request Approvement	Rights to do the approval of a request (depending of business line relationship); Approvals from the business point of view (financial, budget account, etc.)
-Srm.Service Request Process Setup	Rights to define the requesting process - product types, offer packages structure, change types, change type conditions
-Srm.Service Request Support	Rights to do the operational work in this area, such as controlling of the request process (describing, specifying and approving) incl. catalog export to text file
-Srm.Service Fulfillment Support	Rights to do the Service Request fulfillment: - specializing on the fulfillment of certain types of Service Requests - fulfilling different process steps of the fulfillment process - Supportgroups with needed skills from different function areas
-Srm.Service Request Management	Rights to do the management work in this area, such as approvals, reports, prints, etc.
-Srm.Service Request Superadministration	Rights to: - forward a request through the whole process – good for base overall testing of processes - create requests while overriding restrictions of offer (formerly 'pricing offer') structures - use also the old Request creating functionalities - delete and copy things to enable (in a controlled centralized way) stepping into the process and solving special situations - see technical attributes (such as userchanged, datechanged) and more columns in catalogs (more than the pre-defined standard of 9 catalog columns).
-Srm.Service Request Process Designing	Rights to design new processes and to modify the existing ones in this area

Service Level Management

-Service Level Basic Read	Rights to read all service information in this area (incl. print and export to text file)
-Service Level Initiation	Rights to create any Service related object
-Service Level Support	Rights to do the operational work in this area
-Service Level Management	Rights to do the management work in this area, such as approvals, reports, prints, etc.

Service Portfolio Management

-Service Portfolio Basic Read	Rights to read all service information in this area (incl. print and export to text file)
-Service Portfolio Initiation	Rights to create any Service related object
-Service Portfolio Support	Rights to do the operational work in this area
-Service Portfolio Management	Rights to do the management work in this area, such as approvals, reports, prints, etc.

VM Configuration

-Valuemation Conf.User Management	Rights to maintain Valuemation user / groups and their mappings (incl. Business Views) and mapping from existing roles to groups
-Valuemation Conf.Report Management	Rights to maintain Valuemation reports and dashboards
-Valuemation Conf.Vm Configuration	Rights to maintain the global settings, special business settings in Mainparam, views, valuesets, translations, escalations, perform CSV Imports
-Valuemation Conf.User Settings	Rights to modify individual user settings (especially for handling mass data / reports)

VM Administration

-Valuemation Admin.Authorization Management	Rights to maintain Valuemation roles and their rights
-Valuemation Admin.Vm Customizing	Rights to maintain object types, relations, catalogs, rules, calculations, workflows, actions, statuses and status transitions
-Valuemation Admin.Upgrades	Rights to do xml import, metadata model checks and xml export