Roles

You can create a set of roles in BigFix Inventory and assign each of them with different permissions. Then, you can assign those roles to particular users, thus making them responsible for different actions. By setting up correct roles, you can easily establish which user has access to particular functions in BigFix Inventory. The roles can be assigned by the Administrator.

Pre-configured roles

BigFix Inventory has six preconfigured roles: Administrators, Auditors, Catalog Managers, Contract Managers, Software Asset Managers, and Infrastructure Administrators. Each of these roles has a different set of permissions that allow the users to perform various actions. The Administrator can edit or delete those roles, or create new ones and assign them permissions of your choice. The following table lists the preconfigured roles and their permissions.

Table 1. Roles preconfigured in BigFix Inventory and their permissionsThe table consists of seven columns and 24 rows.
Permission Administrator Auditor Catalog Manager Contract Manager Software Asset Manager Infrastructure Administrator
Uninstall Actions Yes
Manage Oracle Auditing Data Yes
Display Preview Panels Yes
Edit Server Configuration Yes
Manage Catalogs Yes Yes
Manage Computer Groups Yes Yes
Manage Computer Properties Yes
Manage Contracts Yes Yes
Manage Data Sources Yes
Manage Directory Servers Yes
Manage Hardware Inventory Yes
Manage Imports Yes Yes Yes
Manage Licenses Yes Yes Yes
Manage Package Properties Yes Yes
Manage Part Numbers Uploads Yes Yes Yes Yes
Manage Roles Yes
Manage Scan Configurations Yes Yes
Manage Software Classification Yes Yes
Manage Support Data Yes
Manage Uploads Yes Yes Yes Yes
Manage Usage Properties Yes Yes
Manage User Provisioning Yes
Manage Users Yes
Manage VM Managers and Servers Yes Yes
View Audit Trail Yes Yes Yes
View Catalog Audit Yes Yes Yes Yes
View Contracts Yes Yes Yes Yes
View Endpoints Yes Yes Yes Yes Yes Yes
View Hardware Inventory Yes Yes Yes Yes
View License Metrics Yes Yes Yes Yes
View Raw Data Yes Yes Yes Yes Yes
View Shared Disks Yes Yes Yes Yes
View Software Catalog and Signatures Yes Yes Yes Yes Yes
View User Details Yes Yes Yes

Permissions

The following list describes permissions that are available in BigFix Inventory. Find out about each of them so that you can tailor the roles to your needs.

Important: Some of the permissions are specific only for the Administrator and cannot be assigned to other users. These permissions include:
  • Display Preview Panels
  • Edit Server Configuration
  • Manage Computer Properties
  • Manage Data Sources
  • Manage Directory Servers
  • Manage Roles
  • Manage Support Data
  • Manage User Provisioning
  • Manage Users
Table 2. Permissions
Permission Comments
Manage Oracle Auditing Data The user can generate, cancel and download Oracle auditing data. Note: in addition to this role, the user must be assigned All computers group access.
Display Preview Panels The user can enable preview features.
Edit Server Configuration The user can change settings of the BigFix Inventory server.
9.2.14 Manage Catalogs

The user can edit catalog servers, update the catalog as well as create, edit, and delete the content of the custom software catalog.

9.2.11 The user can edit the end of support date for software components.

9.2.14 The user can add and remove tags on the selected reports.

Manage Computer Groups The user can create, edit, and delete computer groups.
Manage Computer Properties The user can specify additional computer properties that are to be gathered from the computers in the infrastructure.
Manage Contracts

[The user can create, edit, and delete contracts.

9.2.4 The user can set or edit the license threshold to be notified about excessive license consumption.

9.2.9 The user can add, edit, and delete custom fields.] - This permission is deprecated since BigFix Inventory version 10.0.5.

10.0.5 The user can manage new contracts and manage license metrics.

Manage Data Sources The user can add, edit, and delete BigFix servers that are used as data sources by BigFix Inventory.
Manage Directory Servers The user can add, edit, and delete directory servers that are used for authentication of BigFix Inventory users.
Manage Hardware Inventory (previously: Manage PVU per Core) The user can change the Oracle core factor or the PVU per core value that is assigned to a processor.
Manage Imports The user can schedule imports of data, and run them manually.
9.2.10 Manage Licenses The user can add custom part numbers and new products to the software catalog, and assign additional license metrics to products.
Manage Package Properties The user can create, edit, and delete application properties that are used to recognize software in your infrastructure.
9.2.3 Manage Part Numbers Uploads The user can manage uploads of the part numbers file.
Manage Roles The user can add, edit, and delete roles that are available in BigFix Inventory.
Manage Scan Configurations The user can schedule software scans.
Manage Software Classification The user can reassign software instances between different products, include or exclude them in pricing calculations, and share them between more than one product.
9.2.15 Manage Support Data The user can access the Computer Support Data panel.
Manage Uploads The user can manage uploads of the software catalog, and metric tables.
Manage Usage Properties The user can create, edit, and delete application properties that gather information about the use of software in your infrastructure.
Manage User Provisioning The user can integrate users from a directory server with BigFix Inventory.
Manage Users The user can add, edit, and delete users that exist in BigFix Inventory.
Manage VM Managers and Servers The user can create, edit, and delete VM managers.
Uninstall Actions The user can send automated uninstallation actions or notify logged users about such requests.
View Audit Trail The user can view the Audit Trail report that contains the history of all actions performed by users.
View Catalog Audit The user can view information about changes to the custom software catalog.
View Contracts 9.2.3 The user can view contract usage data. - This permission is deprecated since BigFix Inventory version 10.0.5

10.0.5 The user can view new contracts.

View Endpoints The user can view information about the installed software as well as scan, registry, and raw data from endpoints.
View Hardware Inventory The user can view the details of the processors that are used by the software.
View License Metrics

The user can view the list of all software products that are contained in the PVU License Usage reports, the license type and usage for each product, the history of license consumption over the specified time period, and the top license consuming products.

9.2.9 The user can view values that are specified in custom fields.

View Raw Data The user can view:
  • Metering Data report that contains information about the use of the software items
  • Unrecognized Files report that shows a ranking of the most frequently encountered files
  • Scanned File Data report that provides information about all files that are detected by the software inventory tool scanner
  • Package Data report that contains information about all installed packages
9.2.12 View Shared Disks The user can view information about shared disks that are used in the infrastructure.
View Software Catalog and Signatures The user can view the software catalog and signatures.
9.2.13 View User Details The user can view information about current software users and their details for the software that is installed on the computers in the infrastructure.

To know about how to update permissions, refer to Hardening server installation directory.