How do I configure alarm access using roles?

Purpose

Users can only view alarms for objects that are included in the resource groups assigned to their roles. Viewing service-related alarms requires access to the appropriate service-related objects.

Consider the following when configuring service-related alarm access:

  • Service Site: the user must have access to the associated NE and service to view alarms for a service site.

  • SAPs: the user must have access to the associated service and the (NE | port) to view alarms for a SAP.

  • Physical Links: the user must have access to all endpoint objects to view alarms for a physical link.

  • LAGs: the user must have access to the associated NE to view alarms for a LAG.

  • Tunnel Bindings: the user must have access to the associated NE and service to view alarms for a tunnel binding.

  • Unhealthy NEs view: the user must have access to any NEs that might appear in the page.

The following workflow describes the high-level steps required to create a role intended for alarm management, and to assign it to a user group. This workflow applies to all NSP users who need to view object alarms, regardless of which NSP UI they use for alarm viewing.

Steps
Create resource groups
 
1 

Create an NE | port | LAG group directory; see How do I create a group directory?

2 

Create an NE | port | LAG resource group in the group directory, and define a filter that includes the network elements the user needs to view; see How do I configure a resource group?

3 

Create a service group directory; see How do I create a group directory?

4 

Create a Service resource group in the service group directory, and define a filter that includes the services the user needs to view. You can create multiple service resource groups within a group directory; see How do I configure a resource group?

You can create the service resource group based on a Site ID (NE system address) to include all services for the associated NE.

Assign resource groups to roles
 
5 

Add the resource groups to a role; see How do I configure a role?.

6 

Assign the role to the appropriate user group; see How do I configure a user group?.

End of steps