Simplify Console User Permissions

The Simplify Console integrates with the Windows Authorization Manager to define users that are granted access to the Simplify Console and the access permitted for various functions within the Simplify Console. Authorization Manager is a role-based access control framework with an administration tool to manage policies. A role-based authorization policy specifies access in terms of user roles that reflect Simplify Console's authorization requirements. Users are assigned to roles based on their job functions and these roles are granted permissions to perform related tasks.

Step-by-step guide

To add users that are not Admins to the console, use the Authorization Manager snap in of the MMC.

1. Run azman.msc

   1. Additionally, you can start MMC and Add the Authorization Manager snap-in.

2. Go to Action -> Open Authorization Store…

3. Navigate to C:\Program Files\Tricerat\Simplify Suite\Simplify Console

4. Open the SimplifySuiteAS.xml file.

Once opened, you can review the few basic, pre-created role definitions like Administrator, Assign Printers, and View Console Only that may be useful.  Or you can start creating your own with each new role having any number of default user tasks based on the different roles . There is no limit on the number of different roles that can be assigned, allowing for the granularity of control desired.

You can read more about Authorization Manager here: https://technet.microsoft.com/en-us/library/cc726036(v=ws.11).aspx 

After all roles have been defined and users added:

1. Start Tricerat Simplify Console.

2. Go to Tools -> Options.

3. Under Simplify Console, highlight Security.

4. Check the Enable use of Authorization Manager and point to the same SimplifySuiteAS.xml file that was modified above.

5. Test to verify desired operation.

Related articles