Setting Permissions
Permissions define the access people have to parts of HPE Consumption Analytics portal, and can also limit the type of data people can see in their views. To assign permissions, create groups and users.
Each HPE customer has one (and only one) user defined as the Owner, who has full access to HPE Consumption Analytics portal administrative capabilities. The Owner creates other user accounts, and can even provide full administrative access to other HPE Consumption Analytics portal users by assigning them to the Full Access group. More commonly, the Owner will create groups with more limited sets of access, and assign users to those groups.
The Owner account is permanent. To prevent you from accidentally locking yourself out of HPE Consumption Analytics portal, you cannot delete the Owner account, make it Inactive, or change its permissions. To ensure that the Owner has access to all data, you cannot add filters to that account. Additionally, you cannot make a different user account the Owner.
Another primary purpose of groups is to assign a default view. Consider organizing your users into groups based on the default view they need to see. For more information about views, see Working with the default pages.
Group Permissions
Because each user must belong to a group, it is helpful to begin by creating the groups you will need for your users. By default, users assigned to a group inherit the permissions defined for their group.
You can delete groups you do not need, but only if there are no users assigned to that group.
HPE GreenLake Accounts
Two user groups are defined out of the box for assigning ASM users to accounts with HPE GreenLake core data sources. This enables you to define primary and secondary ASM users with the appropriate permissions.
- HPE Delivery - Primary
- Same permissions as Full Access
- HPE Delivery - Secondary
- Manage Health Checks
- Manage Personal Reports
- Export Analytics Content
- Manage Views
To create a group
- In the navigation pane, click Permissions.
The Permissions page displays the Users list by default. - Click Groups.
The Groups list appears. The Full Access group is included by default. Users assigned to this group have access to every page and function of HPE Consumption Analytics portal. - Click the + icon .
The Create Group dialog appears.
- Enter a Name and Description for the group.
- Select an Assigned View that members of this group will see by default in the Home section of HPE Consumption Analytics portal. See Views for more information.
- In the Group Capabilities section, select the capabilities of HPE Consumption Analytics portal that users in this group need to have.
For example, if you check the Manage Data capability, users in this group will be able to configure collections, lookups, and field packages. If you check the Permissions capability, users in this group will be able to create, modify, and delete users and groups.
- (Optional) Under Filters, add one or more filters that limit the scope of the permissions granted in the Group Capabilities section.
For each filter you add, users in this group will be able to interact only with data that matches the values you specify.
For example, if you specify Provider is Azure, users in this group will only see Azure data. If you specify Provider is not Azure, users in this group will be able to see all data except Azure data. For more information, see Filtering data.
- Click Save to save the group.
User Permissions
Each person that uses HPE Consumption Analytics portal needs a user account. By default, users inherit the permissions of their assigned group, though you can override group permissions for any specific user.
To create a user
- In the navigation pane, click Permissions.
The Permissions page appears, displaying the Users list by default. - Click the + icon .
The Create User dialog box appears.
- In the Email Address field, enter an email address for this user.
HPE Consumption Analytics portal will send login information to this email address. - Enter the user's Name.
- In the User Group field, select a group to which this user belongs. The user inherits the permissions defined for the group.
- (Optional) If you want to override the default permissions defined in the assigned group, check the Override Group Capabilities field, and then select the areas of HPE Consumption Analytics portal this user can access.
- (Optional) If you want to override the default filters defined in the assigned group, check the Override Group Filters field, and then add one or more filters that limit the scope of the permissions for this user. For more information, see Filtering data.
- Click Save to save the user account and trigger an automated email to the new user.
HPE Consumption Analytics portal supports only one user session at a time in a given browser. If a person has two user accounts, they must log out of one before logging in as the other to avoid unpredictable behavior. To log in as two or more users simultaneously, use separate browsers for each, such as one user in Chrome and another in Firefox.