Event list security

All Tivoli Netcool/OMNIbus users belong to one or more user groups. Each group is assigned one or more roles, which determine the permissions for that group. The desktop tools that a user can access and the tasks that a user can perform with the desktop tools depend on the group to which the user belongs and the roles that are assigned to the group.

The Normal, Administrator, and System groups provide group row level security in the event list. The AlertSecurityModel ObjectServer property determines whether group row level security is enforced in the event list.

By default, the AlertSecurityModel property is disabled, and group row level security is not enforced. In this case:

• A member of the Normal group can modify a row that is assigned to themselves or the nobody user. When an alert is received from the ObjectServer, the alert is assigned by default to the nobody user.
• A member of the Administrator group can modify a row that is assigned to themselves, the nobody user, or a member of the Normal group.

If the AlertSecurityModel property is enabled, only users in the group that owns the row can modify the row. In this case, a member of the Normal or Administrator group can modify a row that is assigned to a group of which they are a member.

A member of the System group can always modify any row.