User role descriptions

Every user starts with the basic Guest role because every user is a member of the "everybody" group, and all members of "everybody" are assigned the Guest role automatically.

A Guest can

• Browse reports and dashboards assigned to this user.

DMI

• Report execution
• Report favorite
• Remote dashboards

Configuration

• My profile

A Reporting user can

• Browse reports and dashboards assigned to this user.
• Create reports and dashboards, and save static versions of the reports and dashboards (as pdf files).
• Save reports and dashboards for this user only. (This user's dashboards and reports are not visible to other users.)

DMI

• Report execution
• Report favorite
• Report editing + favorites column
• Report saving in own section, without preload, user/groups, email
• Distributed reports visibility
• Remote dashboards

Configuration

• My profile

Applies to NAM 2019 Beta

A Reporting user - high load will not be added to the back of the report queue when they run reports that put a high workload on the reporting system. High-load reports generated by other users may be queued.

For details on the NAM report queue, see Report queue.

A Reporting power user can

• Browse all reports and dashboards.
• Create reports and dashboards, and save static versions of the reports and dashboards (as pdf files).
• Save reports and dashboards for all users. (This user's dashboards and reports are visible to other users.)

DMI

• Report execution
• Report favorite
• Report editing + favorites column
• Global aliases
• Report saving in own section, without preload, user/groups, email
• Saving report in new location
• Overwriting another person's report
• Assigning a report to users
• Scheduling a report (send by e-mail, preload)
• Import a report (logs)
• Export a report (logs)
• REST API for DMI (read only)
• Distributed reports visibility
• All reports visibility
• Granting privileges to a section
• Remote dashboards

Configuration

• My profile

A Reporting administrator can

• Browse all reports and dashboards.
• Create reports and dashboards, and save static versions of the reports and dashboards (as pdf or mht files).
• Save reports and dashboards for all users. (This user's dashboards and reports are visible to other users.)
• Use all DMI features.
• Access screens to add local users and assign roles and user groups.

DMI

• Report execution
• Report favorite
• Report editing + favorites column
• Global aliases
• Report saving in own section, without preload, user/groups, email
• Saving report in new location
• Overwriting another person's report
• Assigning a report to users
• Scheduling a report (send by e-mail, preload)
• Import a report (logs)
• Export a report (logs)
• REST API for DMI (read only)
• Partner export
• Distributed reports visibility
• All reports visibility
• Granting privileges to a section
• Diagnostic/advanced views (properties); Section parameters view + Diagnostics application
• Multitenancy (not affected by)
• Remote dashboards
• Module status
• Notification bar

Configuration

• Location configuration
• BUC configuration
• My profile
• Alarms configuration
• Business hours configuration
• Maintenance access
• Licenses

Diagnostics

• Log
• Configuration history
• Export config

A Deployment administrator can deploy NAM Probes and configure farms.

DMI

• Report execution
• Report favorite
• Multitenancy (not affected by)
• Notification bar

Configuration

• NAM Probe configuration
• DPN configuration
• Farm configuration
• Data server configuration
• My profile
• Licenses

Diagnostics

• Log
• Configuration history

A Monitoring administrator can configure, import, and export business units.

DMI

• Report execution
• Report favorite
• Multitenancy (not affected by)
• Notification bar

Configuration

• BUC configuration
• My profile
• Technical configuration (including software services)
• Business hours configuration
• Licenses
• Operation sequences

Diagnostics

• Log
• Configuration history

A Locations administrator can configure sites, areas, regions, and UDLs, with access to the network reports workflow.

An Alarms administrator can configure alarms.

DMI

• Report execution
• Report favorite
• Multitenancy (not affected by)
• Notification bar

Configuration

• My profile
• Alarms configuration

Diagnostics

• Log
• Configuration history

A Maintenance and support administrator can import/export business units, run full diagnostics, and use reports.

DMI

• Report execution
• Report favorite
• Report editing + favorites column
• Built-in report modification
• Report saving in own section, without preload, user/groups, email
• Distributed reports visibility
• Diagnostic/advanced views (properties); Section parameters view + Diagnostics application
• Multitenancy (not affected by)
• Remote dashboards
• Module status
• Notification bar

Configuration

• BUC Import
• BUC Export
• My profile
• userProperties, rtmproperties* Configuration
• Maintenance access
• Licenses

Diagnostics

• SQL
• Groovy
• File config
• Log
• Configuration history
• Patch
• Diagnostic Console*
• Rtmdebug
• Export config

A Security administrator can configure user accounts and multitenancy.

DMI

• Report execution
• Report favorite
• Multitenancy (not affected by)
• Notification bar

Configuration

• User configuration screens
• My profile
• Multitenancy configuration

A System administrator without packet capture has all privileges except packet capture and the ability to grant packet capture privileges.

The aim of this role is to enable full system administration while protecting client data. Assign this role to someone who should be able to deploy, configure, and manage the entire software suite, but who should not have access to captured data.

• This role does not grant the ability to access captured data.
• This role does not grant the ability to change role assignments that would enable anyone to access captured data.

A System administrator has all privileges, including packet capture and ability to grant packet capture privileges to others.

This person has complete access to system functionality, including everything the above roles can do, plus user management, LDAP, and database configuration.

A Public API user can access internal NAM Server/NAM Console read-only functionality and DMI read-only functionality.

DMI

• REST API for DMI (read only)
• Partner export
• Multitenancy (not affected by)

Configuration

• userProperties, rtmproperties* Configuration

Console REST API

• ESM 2.0 public API
• Version

A User name access user/administrator can hash and encrypt/decrypt user names.

DMI

• Report execution
• Report favorite

Configuration

• My profile

Diagnostics

• Hash and/or encrypt/decrypt user name function (delivered by NAM Probe)

A Packet capture User can capture packets and has broad reporting access:

• Can view reports assigned to this user.
• Can view the default dashboards, but cannot make changes to any component or feature.
• Can access custom dashboards and any drill-down reports assigned to this user.
• Can use the DMI to create and view reports.
• Can use the packet data mining tool to capture packets.
• Can not save report definitions – changes are not persistent from session to session. However, this user can save a static version of a report as a .pdf or .mht file.

A Synthetic console user can sign in to the Enterprise Synthetic Console and access all available console features there.

A Mobile application user can use the MobileAPM application for Guest-level access to reports assigned to that user.

DMI

• Report execution
• Report favorite