FF_ADMIN role on Fire Fighter

[Former Member]

Greetings all,

Require some assistance please. We are granting the FireFighter owners access to the Web based FireFighter application to generate reports and logs.

The only role that I can see in the UME is the FF_ADMIN role. When I grant access to this role, the owner also has the ability to the configuration tab as well. How do I restrict access to just the reports and logs?

Are there any other roles within the UME that I could assign to the FF owners? We have restricted access to the backend systems for FF owners, we want them to use the web based Firefighter application only.

Any advice is highly appreciated. We are using GRC version 5.2

Rgds,

Rodger Harris.

[koehntopp · Accepted solution]

Rodger,

in the default, there is no other role.

Do this:

- copy the role to FF_REPORTING

- remove all the offending actions around configuration (in the UME "actions" tab)

- assign that role to a user and test if it does what you need

Frank.

[former_member366047 · Accepted solution]

More specifically, you can assign that FF_Reporting role the following actions:

ConfChangeRoleLogReport

ConfChangeUserLogReport

InvalidUserReport

LogSummaryReport

SessionSummaryReport

SessionSummaryRoleBasedReport

SODReport

TranUsageReport

Ankur

[koehntopp · Accepted solution]

Thanks, I didn't have access to UME while I was writing my post

Frank.

[Former Member]

Thanks Guys,

I've implemented your suggestion and it works perfect.

Thanks for the prompt response.

Cheers.