Question
You wish to allow some restricted users to access a particular portal page, and you need to know how to set the necessary permissions.

Answer

Prerequisites:

This article assumes that you have already created and tested the web portal, including the following:

• Created custom report(s)
• Created web part(s)
• Created portal page(s)
• Created console menu links to the portal pages
• Confirmed that all of this works from an unrestricted account

Additionally, this article assumes that you have already created restricted accounts, and confirmed that they are working as expected.

For specific instructions see: How can I create a Security Role in NS 7 to run just reports

Instructions

1. Assign permissions on the Console Item
   
   Note: If no console items are selected, the user will see an "Access Denied" message after entering their credentials.
    
   1. In the Symantec Management Console,
   2. In the menu, go to Settings > Security > Permissions
   3. In the Security Role Manager screen:
   4. In the top section, click on the role drop-down field
   5. Select the appropriate Security Role
   6. In the left-hand pane,
      1. In the View drop down field select: Console Menu
      2. In the toolbar, click the Edit pencil
   7. In the Item Selector dialog:
      1. Expand the Console menu item
      2. Select the created menu item.
      3. Click: Save Changes
          
2. Assign permissions on the Portal Page
   
   Note: If the Portal Pages is not select, then the restricted user will see the item in the menu, but when the select it they will see the error: “You do not have permission to view this portal page.”
    
   1. In the Security Role Manager screen:
   2. In the top section, click on the role drop-down field
   3. Select the appropriate Security Role
   4. In the left-hand pane,
      1. In the View drop down field select: Portal Pages
      2. In the toolbar click the Edit pencil
   5. In the Items Selector dialog:
      1. Expand the Portal Pages item
      2. Select the appropriate portal page item.
      3. Click: Save Changes
          
3. Assign permissions on the Web Parts
   
   Note: If a web part is not selected, then the portal page will display, but that web part will not appear, and no error will display either.
    
   1. In the Security Role Manager screen:
   2. In the top section, click on the role drop-down field
   3. Select the appropriate Security Role
   4. In the left-hand pane,
      1. In the View drop down field select: Web Parts
      2. In the toolbar click the Edit pencil
   5. In the Items Selector dialog:
      1. Expand the Web Parts item
      2. Select the appropriate Web Part items.
      3. Click: Save Changes
          
4. Assign permissions on the Reports
   
   Note: If a report that is referenced by a web part is not selected, then the web part will appear, but will contain the error message "unknown error", also an Edit button will appear. Clicking on the edit button will produce the error “Server Error in 'Altiris/Reporting' Application...”
    
   1. In the Security Role Manager screen:
   2. In the top section, click on the role drop-down field
   3. Select the appropriate Security Role
   4. In the left-hand pane,
      1. In the View drop down field select: Reports
      2. In the toolbar click the Edit pencil
   5. In the Items Selector dialog:
      1. Expand the Reports item
      2. Select the appropriate Report items.
      3. Click: Save Changes

Next Steps

If you are seeing some permissions in the logs see, then see

• How to determine where an item is in the menu hierarchy, in Notification Server 7

If the role needs some security privileges to use particular web part, then see:

• Symantec Management Platform Security Privileges

Troubleshooting suggestions:

If a report does not display as desired within a web part, on a portal page, then - if possible - try to allow the limited role to run the report outside of the portal, to confirm that the report is working as desired. For instructions, on doing this and for further troubleshooting suggestions see:

• How can I create a Security Role in Notification Server for users that need to run just reports?. (KB 178283)