Custom DA for only Users and Group Management

Amit.Varshney

Hi,

We have a requirement that we need to give user management access ( to create, modify business users including sysadmin / super users) to a team with in our organization with a no knowledge in Documentum. We dont have a time and resource to develop a custom app for user management. so we are left with only option to give them super user access and da url and let them perform user management function. but it is a risky arrangement.

Any suggestion to handle this kind of scenario ?

Is there any configuration possible in da that all the nodes expect user management / group management nodes can be hidden ?

Any other thought would be appreciated as well ?

Thanks

AV

dnvhariprasad

Try Administrator Access sets.  As per the documentation

The administrator access functionality enables access to administration nodes based on roles. The nodes, such as Basic Configuration, User Management, Job Management, and Audit Management, provide access to different repository and server functions.

In Documentum Administrator, the administrator access sets are managed on the Administrator Access Sets page. To access the Administrator Access Sets page, select Administration > Administrator Access.

Note

Administrator Access functionality is available only on Documentum 6 and later repositories.

Administrator access set definitions reside in the global registry. The access sets do not conflict with Content Server privileges. Object level and user level permissions and permission sets take precedence over administrator access sets. In general, administrator access sets control node access as follows:

• Users are not assigned an administrator access set and do not have superuser privileges, cannot access administration nodes.
• Users who are assigned an administration access set, but do no have superuser privileges, can only access the nodes that are enabled in their administration access set.
• Users with superuser privileges and at least coordinator client capabilities are not affected by administrator access sets. These users always have access to the entire administration node.
• The Groups node is always enabled for users with Create Group privileges.
• The Types node is always enabled for users with Create Type privileges.

The list of available roles is retrieved from the repository to which the administrator is connected. To ensure that administrator access sets function correctly across an application, the roles associated with the administrator access sets must exist in all repositories. If the same role name exists in both the global repository and a non-global repository, the user of the role would see the nodes as per the administrator access specified in the global repository. Even if the user is able to see the nodes, the user can perform operations only with sufficient privileges.

Note

The following Administration nodes are currently not available for the administrator access set functionality:

• Work Queue Management
• Distributed Content Configuration
• Privileged Clients

The User Management chapter provides information about setting up roles.