Symantec ALTIRIS CMDB SOLUTION 7.0 - V1.0, CMDB SOLUTION 7.0, Altiris CMDB Solution 7.0 User Manual

Altiris CMDB Solution from Symantec Users Guide
Version 7.0
CMDB Solution Users Guide
The softwaredescribed inthis bookis furnishedunder alicense agreementand maybe used only in accordance with the terms of the agreement.
Legal Notice
Copyright © 2010 Symantec Corporation. All rights reserved.
Symantec, the Symantec Logo, and Altiris are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners.
This Symantec product may contain third party software for which Symantec is required to provide attribution to the third party (Third Party Programs). Some of the Third Party Programs areavailable underopen sourceor freesoftware licenses. The License Agreement accompanying the Software does not alter any rights or obligations you may have under those opensource orfree software licenses. Please see the Third Party Legal Notice Appendix to this Documentation or TPIP ReadMe File accompanying this Symantec product for more information on the Third Party Programs.
The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any.
THE DOCUMENTATIONISPROVIDED "ASIS" AND ALLEXPRESS OR IMPLIEDCONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLYINVALID.SYMANTEC CORPORATIONSHALLNOT BELIABLEFOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE.
The LicensedSoftware andDocumentation aredeemed to be commercial computer software as definedin FAR 12.212 and subject to restricted rights as defined in FAR Section52.227-19 "Commercial Computer Software - Restricted Rights" and DFARS 227.7202, "Rights in Commercial Computer Software or Commercial Computer Software Documentation", as applicable, and any successor regulations. Any use, modification, reproduction release, performance, displayor disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement.
Symantec Corporation 350 Ellis Street Mountain View, CA 94043
http://www.symantec.com
Technical Support
Symantec Technical Support maintains support centers globally. Technical Supports primary role is to respond to specific queries about product features and functionality.The Technical Support group also creates content forour online Knowledge Base. The Technical Support group works collaboratively with the other functional areas within Symantec to answer your questions in a timely fashion. Forexample, theTechnical Supportgroup works with Product Engineering and SymantecSecurity Response to provide alerting services andvirus definition updates.
Symantecs maintenance offerings include the following:
A range of support options that give you the flexibility to select the right
amount of service for any size organization
Telephone and Web-based support that provides rapid response and
up-to-the-minute information
Upgrade assurance that delivers automatic software upgrade protection
Global support that is available 24 hours a day, 7 days a week
Advanced features, including Account Management Services
For information about Symantecs Maintenance Programs, you can visit our Web site at the following URL:
www.symantec.com/techsupp/
Contacting Technical Support
Customers with a current maintenance agreement may access Technical Support information at the following URL:
www.symantec.com/techsupp/
Before contacting Technical Support, make sure you have satisfied the system requirements that are listed in your product documentation. Also, you should be at the computer on which the problem occurred, in caseit isnecessary to replicate the problem.
When you contact Technical Support, please have the following information available:
Product release level
Hardware information
Available memory, disk space, and NIC information
Operating system
Version and patch level
Network topology
Router, gateway, and IP address information
Problem description:
Error messages and log files
Troubleshooting that was performed before contacting Symantec
Recent software configuration changes and network changes
Licensing and registration
If yourSymantec product requires registration or a license key, accessour technical support Web page at the following URL:
www.symantec.com/techsupp/
Customer service
Customer service information is available at the following URL:
www.symantec.com/techsupp/
Customer Service is available to assist with the following types of issues:
Questions regarding product licensing or serialization
Product registration updates, such as address or name changes
General product information (features, language availability, local dealers)
Latest information about product updates and upgrades
Information about upgrade assurance and maintenance contracts
Information about the Symantec Buying Programs
Advice about Symantec's technical support options
Nontechnical presales questions
Issues that are related to CD-ROMs or manuals
Maintenance agreement resources
If you want to contact Symantec regarding an existing maintenance agreement, please contact the maintenance agreement administration team for your region as follows:
customercare_apac@symantec.comAsia-Pacific and Japan
semea@symantec.comEurope, Middle-East, and Africa
supportsolutions@symantec.comNorth America and Latin America
Additional enterprise services
Symantec offers a comprehensive set of services that allow you to maximize your investment in Symantec products and to develop your knowledge, expertise, and global insight, which enable you to manage your business risks proactively.
Enterprise services that are available include the following:
These solutions provide early warning of cyber attacks, comprehensive threat analysis, and countermeasures to prevent attacks before they occur.
Symantec EarlyWarning Solutions
These servicesremove theburden ofmanaging andmonitoring securitydevices and events, ensuring rapid response to real threats.
Managed Security Services
Symantec Consulting Services provide on-site technical expertise from Symantec andits trustedpartners. SymantecConsulting Servicesoffer avariety of prepackaged and customizable options that include assessment, design, implementation, monitoring,and management capabilities. Each is focused on establishing andmaintaining the integrity and availability of your IT resources.
Consulting Services
Educational Services provide a full array of technical training, security education, security certification, and awareness communication programs.
Educational Services
To access more information about Enterprise services, please visit our Web site at the following URL:
www.symantec.com
Select your country or language from the site index.
Technical Support .......... ..... ..... ..... ..... .... ..... ..... ..... ..... ......... ..... ..... ..... ..... ......... ... 4
Chapter 1 Introducing CMDB Solution ... ..... ..... ..... ..... ......... ..... ..... .... 11
About CMDB Solution .... ..... ..... ..... ..... .... ..... ..... ..... ..... ......... ..... ..... 11
About CMDB Solution 7.0 new features ... ..... ..... ......... ..... ..... ..... ..... .. 12
Terminology . ..... ..... ..... ......... ..... ..... ..... ..... ......... ..... ..... ..... ..... .... . 16
Chapter 2 Configuring CMDB Solution ..... .... ..... ..... ..... ..... ......... ..... ... 17
About CMDB configuration tasks ... ..... ..... ..... ......... ..... ..... ..... ..... ..... 17
About percentage ownership of resources . ..... ......... ..... ..... ..... ..... ..... 17
About CMDB rules .... ..... ..... ......... ..... ..... ..... ..... .... ..... ..... ..... ..... ..... 18
Chapter 3 Using resource types ..... ..... ......... ..... ..... ..... ..... .... ..... ..... ..... 19
About resource types ... ..... ..... ..... .... ..... ..... ..... ..... ......... ..... ..... ..... .. 19
About predefined resource types . ..... ..... ..... ..... ......... ..... ..... ..... ..... ... 20
About base resource types ... ..... ..... ..... ......... ..... ..... ..... ..... ......... ..... 21
About data classes ... ......... ..... ..... ..... ..... ......... ..... ..... ..... ..... ......... .. 21
About CMDB data classes ..... .... ..... ..... ..... ..... ......... ..... ..... ..... ..... ..... 22
About data class attributes ... ......... ..... ..... ..... ..... ......... ..... ..... ..... .... 24
About data class attribute parameters . ..... ..... ..... ......... ..... ..... ..... ..... 24
About data input masks ..... ..... ..... ..... .... ..... ..... ..... ..... ......... ..... ..... .. 25
About resource association types .... ..... ..... ..... ..... ......... ..... ..... ..... .... 26
Resource type relationships ... ..... ..... ..... ......... ..... ..... ..... ..... ......... ... 26
About the resource data class summary page ..... ..... ..... ......... ..... ..... .. 27
Chapter 4 Using resources ... ......... ..... ..... ..... ..... ......... ..... ..... ..... ..... .... .. 29
About resources . ..... ..... ..... ..... .... ..... ..... ..... ..... ......... ..... ..... ..... ..... . 29
Resource categories ... ......... ..... ..... ..... ..... .... ..... ..... ..... ..... ......... ..... 30
About merging resources . ..... .... ..... ..... ..... ..... ......... ..... ..... ..... ..... .... 30
About the Resource Association Diagram . ..... ..... ..... ..... ......... ..... ..... . 30
About item tasks ..... ..... ......... ..... ..... ..... ..... ......... ..... ..... ..... ..... .... .. 31
About resource list item tasks ........ ..... ..... ..... ..... .... ..... ..... ..... ..... ..... 31
About user-defined item tasks .... .... ..... ..... ..... ..... ......... ..... ..... ..... .... 33
About reports on owned resources .. ......... ..... ..... ..... ..... ......... ..... ..... 33
Contents
Chapter 5 Using asset resource types and resources . ..... ......... ..... 35
About asset type resources .... ......... ..... ..... ..... ..... .... ..... ..... ..... ..... .... 35
About the computer resource type .... ..... ..... ..... ..... ......... ..... ..... ..... ... 35
About asset life cycles ..... ..... ......... ..... ..... ..... ..... ......... ..... ..... ..... .... 36
About retiring or disposing of an asset ....... ..... ..... ..... ..... ......... ..... .... 36
Chapter 6 Managing Configuration items ..... ..... ..... .... ..... ..... ..... ..... .. 37
About contract type resources . ..... ..... ..... ......... ..... ..... ..... ..... ......... .. 37
About datacenter type resources .... ..... ..... ......... ..... ..... ..... ..... .... ..... . 37
About service type resources .... ..... ......... ..... ..... ..... ..... ......... ..... ..... . 38
About computer resource types ... ..... ......... ..... ..... ..... ..... ......... ..... ... 38
Chapter 7 About CMDB Security .... ......... ..... ..... ..... ..... ......... ..... ..... ..... 39
About CMDB security . ..... ..... ......... ..... ..... ..... ..... ......... ..... ..... ..... .... 39
About role-based security ... ......... ..... ..... ..... ..... .... ..... ..... ..... ..... ...... 40
About predefined security roles .... ......... ..... ..... ..... ......... ..... ..... ..... .. 40
About role-based security configuration ........ ..... ..... ..... ..... ......... ..... . 40
About scope-based security ... ..... ..... .... ..... ..... ..... ..... ......... ..... ..... .... 41
About security scoping for reports ........ ..... ..... ..... ..... ......... ..... ..... ... 42
Chapter 8 Using organizational resource types and
resources ..... ..... ......... ..... ..... ..... ..... .... ..... ..... ..... ..... ......... . 43
About organizational resource types ......... ..... ..... ..... ..... .... ..... ..... ..... 43
About hierarchal resource types ... ..... ......... ..... ..... ..... ..... .... ..... ..... .. 45
About organizational groups and views ..... ..... .... ..... ..... ..... ..... ......... . 45
Chapter 9 Using the CMDB interface ... ..... ..... ..... .... ..... ..... ..... ..... ....... 47
CMDB Global Settings page ..... ..... .... ..... ..... ..... ..... ......... ..... ..... ..... .. 48
Default values page ..... ..... ..... .... ..... ..... ..... ..... ......... ..... ..... ..... ..... .. 48
Default values page: Data entry for default values page ..... ..... ..... ........ 48
Display String Settings page .... ..... ..... ......... ..... ..... ..... ..... ......... ..... . 49
License Usage page .... ..... ..... ......... ..... ..... ..... ..... ......... ..... ..... ..... .... 49
Organizational Hierarchy Settings page .... ..... ......... ..... ..... ..... ..... ..... 49
Ownership Settings page ... .... ..... ..... ..... ..... ......... ..... ..... ..... ..... ....... 50
Report Scoping page ......... ..... ..... ..... ..... ......... ..... ..... ..... ..... .... ..... .. 50
Resource List page .... ..... ..... ......... ..... ..... ..... ..... ......... ..... ..... ..... .... 51
About the resource association type page ... ..... ..... ..... ..... ......... ..... .... 51
Resource Data Class page ..... ..... .... ..... ..... ..... ..... ......... ..... ..... ..... .... 52
About the resource association type page ... ..... ..... ..... ..... ......... ..... .... 53
Resource data entry tab settings page .... ..... ......... ..... ..... ..... ..... .... .... 54
Contents8
Merge Resources page ..... ..... ..... ..... ..... ......... ..... ..... ..... ..... ......... .... 55
Assign Computer's Ownership to be the Primary User task page ..... ..... . 55
Clean Ownership task page ..... ..... ..... ..... ......... ..... ..... ..... ..... ......... .. 56
Duplicate Computer Merge task page ..... ......... ..... ..... ..... ..... ......... .... 56
Duplicate User Merge task page . .... ..... ..... ..... ..... ......... ..... ..... ..... ..... 57
Inventory Clean Up page ..... ..... ..... ..... ..... ......... ..... ..... ..... ..... ......... 58
Inventory to Asset Synchronization task page . ..... ..... ..... ..... ......... ..... 58
Resource Merge Rule task page ........ ..... ..... ..... ..... .... ..... ..... ..... ..... ... 59
Update network resource location task page ..... ......... ..... ..... ..... ..... ... 60
Update Organizational Hierarchy task page ... ..... ..... ..... ..... ......... ..... . 61
Index .... ..... ..... ..... ......... ..... ..... ..... ..... ......... ..... ..... ..... ..... ......... ..... ..... ..... ......... ..... . 63
9Contents
Contents10
Introducing CMDB Solution
This chapter includes the following topics:
About CMDB Solution
About CMDB Solution 7.0 new features
Terminology
About CMDB Solution
CMDB (ConfigurationManagement Database)Solution letsyou modelconfiguration items, resources,and the relationships between them in a single, central database. It lets you facilitate the identification of all components and relationships, and to instigate any required changes. The solution actively manages resources according to user-specified instructions in jobs, tasks, configuration policies, and custom CMDB rules.
CMDB Solution has the following features and uses:
Define organizational groups and hierarchy.
Organizational resources such as departments and cost centers are used to mirror your own organization's structure and hierarchy. CMDB Solution hierarchy featuresand child to parent relationships are used to specifystandard settings throughout an organizational hierarchy. For example, a task that is applied to a parent department can be automatically pushed down to child departments. Setting up organizational resources should be the first thing you do with CMDB Solution.
See “About organizational resource types” on page 43.
Define resources.
Resources such as assets and contracts are entered into the database using predefined templates called resource types. The predefined resource types should be used when possible. Predefined resource types leverage other
1
Chapter
resource types. They provide summary data on the resources created, include associated reports, and include functionality not available in custom resource types. Ifnone of the predefined resource types meetyour needs, you can create a new resource type.
You can specify default resource type values so that all resources based on a resource type are created with predefined values. When you enter data for assets, certain fields have the same value for many assets of a particular asset type. You can populate these fields with a default value. For example, users in a particular location have the same phone number prefix. You can save time by having the prefix already entered into the appropriate field.
Add data to the Configuration Management Database
Importing is the easiest and most efficient method of entering data into the system. Youcan alsoenter data manually. As you set up a resource management system, there is certain data that makes sense to enter before other data. For example, most resources rely on the availability of organizational data.
Clean up and configure data management with ready-made configuration
items. See “About CMDB configuration tasks” on page 17.
Create customized item actions and CMDB Rules to manage and manipulate
data CMDB rules target a group of assets based on their type and properties, and
then make changes to them. Out of the box configuration items address the most commonly requiredresource managementpolicies. CMDBRules provide the flexibility to create custom policies for individual resource management needs.
See “About CMDB rules” on page 18.
Configure security.
If multiple users work with resources, for example entering and editing data, then youshould configuresecurity. CMDBSolution includes predefined security roles. You can modify predefined security roles or you can create your own roles. You can also restrict or allow access to resource types and data classes. Hierarchy features are used to set and enforce security settings throughout a hierarchy.
About CMDB Solution 7.0 new features
Many features available in CMDB Solution 7.0 were included in previous versions of CMDB Solution. In addition, CMDB Solution 7.0 includes several new and improved features.
Introducing CMDB Solution
About CMDB Solution 7.0 new features
12
Table 1-1
CMDB Solution 7.0 features available in previous versions
DescriptionExisting feature
CMDB Solution7.0 includesseveral predefinedresource types(also called configuration items (CI) or assets) that have predefined attributes and associations. Predefined resource types include computer, monitor, network printer, cell phone, rack, service, system, and UPS.
Configuration items
CMDB Solution 7.0 lets you track a resource's associations and relationships, such as who is the owner of an asset and where is its location. You can also track which resources are associated with each owner.
Relationships and associations
CMDB Solution 7.0 lets you add new resource types and new data classes.
Extendable resource model
Organizational resource types can be associated with another resource of the same type. For example, users who have the same manager can be associated with each other. Also, the Location organizational resource type can be used to designate office locations, specific buildings, and floors. Other predefined organization types include Cost Centers and Departments.
Organizational types
Similar to the link between CMDB Solution 6.5 and Altiris Helpdesk Solution, CMDB Solution 7.0 provides links for Symantec ServiceDesk 7.0. This type of connectivity lets you analyze the effects of a proposed change.
Connectivity to analyze proposed change to CMDB
The Resource Association Diagram feature lets you view asset relationships in a graphical format.
Graphical view of assets and associations
13Introducing CMDB Solution
About CMDB Solution 7.0 new features
Table 1-2
CMDB Solution 7.0 new and improved features
DescriptionNew and improved
feature
The improved UI includes the following elements:
Menu bar -- lets you manage the Symantec Management
Platform andinstalled solutions. It also lets you search for items, such as computers, users, and reports.
Breadcrumb bar -- displays the path you used to navigate to the
current location.
Left pane -- provides a tree view of items that can be selected
and expanded.Right-clicking provides additional functionality, such as creating a new asset.
Right pane -- displays the content that is associated with items
selected in the left pane.
You can customize several console elements, such as portal pages, Web parts, views, menus, and context menus (right-click menus).
Improved user interface
Portal pages display a collection of different pieces of information that are contained in Web parts. Web parts are the building blocks for portal pages. A Web part can display a report or the contents of a Web page. The console provides a set of predefined Web parts that you can use to build your portal pages. You can modify Web parts and create new ones. By creating portal pages, you can customize the user interface for your specific job function.
Portal pagesand Web parts
You can choose to show or hide menu items depending on a user's security role. For example, you can givea user access to theReports menu but not to the Manage menu. You can also add menus and customize sub-menus.
Role-specific views
Resources in the CMDB Solution 7.0 now obtain their permissions from the organizational group and views to which they belong. An organizational view is a self-contained hierarchy of organizational groups that contain resources. Organization views simplify administration of Symantec Management Platform, so their structure should reflect how you administer Notification Server .If you manage resource by geographical regions, you could set up organizational views according to geography. For example, World > Americas > North America > Regions > Region West > California > Los Angeles.
If you manage resources along functional lines, you could set up organization viewsaccording to function, such as Sales, Marketing, and R&D. You can set up multiple organizational views to have multiple ways to organize resources.
Inherited permissions and organizational views
Introducing CMDB Solution
About CMDB Solution 7.0 new features
14
Table 1-2
CMDB Solution 7.0 new and improved features (continued)
DescriptionNew and improved
feature
The reporting engine is faster and more flexible. Security scoping is automatically enabled on reports. CMDB 6.5 reports are still available, but without security scope enforcement.
Improved reporting engine
The edit page lets you view and edit all resource types, whether or not they were predefined or custom. CMDB Solution 7.0 no longer has tabs.Fields are now displayed in alphabetical order by the name of the data class that they are in or the name of the association. For example, the data class Manufacturer contains the fields Manufacturer and Model precedes the association Location (since the letter "l" precedes "m" in the alphabet).
The edit page now has the ability to be customized and saved as a view. In an edit page view, you can define the order in which to display data classes and associations. You can choose to hide data classes and associations. You can set up a global view that is available to all users.
Improved resource editing and global views
You can view a resource and the resources that are associated with it. The Resource Association Diagram has the following two filters:
Association type filter – lets you choose which associationtypes
you want to see displayed in theResource Association Diagram.
Resource type filter – lets you choose which resource types you
want to see.
Resource AssociationDiagram letsyou specify the number of levels and nodes to display. It has three different formats: tree hierarchy, free form, and static. Nodes can be clicked and dragged to change the waya nodedisplays. Tocustomize andeasily recreatethe display for your environment, you can save the display options and filters.
Improved resource association diagram
When you set up associations between resources during the CMDB Solution 7.0 installation,organizational views are automatically created with the same hierarchy and membership.
Automatically-created organizational views
The predefined organizational are Location, Cost Center, and Department. However, a company might need to create additional organizational types, for example Business Units. The first few steps for creating an organizational type are the same as those for creating a custom resource type with data classes, with one exception. The one extra step is to set up an association from the new resource type to itself by clicking Use as Hierarchy Associationon the resource association definition page.
Improved organizational types
15Introducing CMDB Solution
About CMDB Solution 7.0 new features
Terminology
To better understand CMDB Solution, it is important that you understand the terminology. The following are terms with which you should be familiar:
Resource type
A template that is used for creating resources.
Resource
Items suchas assets, contracts, and users with which NotificationServer works and stores data.
Base resource type
The predefined resource type on which you can base custom resource types as you create them. A resource type inherits all of the data classes of its base resource type.
Data class
The building block of a resource type, data classes represent the fields in resources. For example, .
Data class attribute
A component of a data class, which is represented as a column of a table (in a multi-row data class) or field.
Data class attribute parameter
Parameters of a data class attribute, which specify the characteristics of the attribute such as name, description, and maximum length of the attribute.
Item task
An action that can be performed on a resource. For example, specifying an owner, specifying the cost center, retiring the asset, and cloning.
Resource association type
A template for creating a child to parent relationship between two resource types. This association lets you link resources for more convenient access to associated data.
Introducing CMDB Solution
Terminology
16
Configuring CMDB Solution
This chapter includes the following topics:
About CMDB configuration tasks
About percentage ownership of resources
About CMDB rules
About CMDB configuration tasks
Administrators perform configuration tasks. Several configuration tasks only need tobe performedduring the initial setup of your resource management system; they are not ongoing tasks.
The following are common CMDB Solution configuration tasks:
Inventory to asset data synchronization
Default computer ownership
Default computer location
Duplicate computer merging
Computers no longer in use
About percentage ownership of resources
Multiple usersand cost centers can partly own the same asset. To assignownership percentages, first, you must allow assets to have multiple users. Then, youspecify ownership by user, department, and cost center, and set ownership percentages. Ownership percentages are calculated in the following ways:
Asset ownership must total 100%. If there is one owner assigned, ownership
is calculated at 100%, if there are two owners assigned it is 50/50.
2
Chapter
If ownership totals less than or greater than 100.00 % then you must select
auto calculate in the Associations tab. The Associations tab is in Edit and create resource page. In this case ownership is calculated by multiplying both percentages withwhat is required to make 100%, while theratio is maintained. For example, consider the following:
If one owner owns 85% and another owns 10%, then ownership is increased to total 100%. The 85:10 ratio is maintained.
If the ownership percentage adds up to total more than 100%, the ratio is
maintained and the percentages are decreased to total 100%.
About CMDB rules
CMDB rules are custom rules created by users for managing dataand tasks.CMDB Solution configuration pages such as Synchronize Hierarchy Collections and Update Network Resource Location can be regarded as CMDB rules. The pages are included in the solution by default.
You can create your own CMDB rules. You can target a group of assets based on their type and properties, and then make changes to them. You must define the criteria for the targeted assets, the changes that occur, and the type of action to be taken. With custom CMDBrules youcan test them before yourrun them, create schedules, and notify relevant personnel.
Warning: CMDB Rules are powerful and can alter vast amounts of data. Ensure that you test CMDB Rules first (using the Test Rule icon) and are sure that of the changes you make before you run them.
Configuring CMDB Solution
About CMDB rules
18
Using resource types
This chapter includes the following topics:
About resource types
About predefined resource types
About base resource types
About data classes
About CMDB data classes
About data class attributes
About data class attribute parameters
About data input masks
About resource association types
Resource type relationships
About the resource data class summary page
About resource types
Resource typesare the templates for entering resource data into theConfiguration Management Database. All items that CMDB Solution monitors or managed are based upon a resource type. For example, the resource type: "Computer."
See “About resources” on page 29.
You must have administrator rights to create and edit resource types.
Resource types include the following components:
3
Chapter
Base resourcetypes. Base resource types are ae foundation onwhich a resource
type is built. A resource type inherits the data classes of the base resource type. All resource types, except the Asset type and the Contract type, are based on another resource type.
See “About base resource types” on page 21.
Data classes. Data classes are the building blocks of a resource type. Each data
class defines the attributes that the resource type uses to store data. See “About data classes” on page 21.
Resource association types. Resource association types create associations
between resources. Resource association types link related data together. See “About resource association types” on page 26. to resource association
types
CMDB solution lets you define your own resource types, but it also includes many predefined resource types.
See “About predefined resource types” on page 20.
About predefined resource types
Although you can define your own resource types, CMDB Solution includes many resource typesthat are predefined. Predefined resource types contain therelevant associations, fields, and reports for a particular type of resource.
Resource types let you enter resource data into the Configuration Management Database.
See “About resource types” on page 19.
Use the predefined resource types whenever possible.
You canadd custom fields to predefined resource types. Predefinedresource types include features and include reports. These features and reports are not available with the resource types that you define.
Although commonly used resource types are predefined, they may have a name that you are not accustomed to. For example, In your organization you have a Mail Stop."CMDB solution does not have a predefined"Mail Stop" resource type. However, "Location" is the predefined equivalent to "Mail Stop and provides the functionality that you need.
You can change the name of any resource type throughout the solution by using the Display As rule.
Using resource types
About predefined resource types
20
About base resource types
A base resourcetype isthe resourcetype onwhich anotherresource typeis based.
Resource types let you enter resource data into the Configuration Management Database.
See “About resource types” on page 19.
A resource type inherits all of the data types of the base resource type. Any resource type can serve as a base resource type. If the base resource changes, any resource types that use it also change. This feature lets you effectively manage resource types. For example, you can create a generic invoice base resource type that includesthe attributes that all invoices use. Youcan then use the base resource type to create any specific invoices that require unique attributes. You only need to add the additional data classes for the unique attributes.
A base resource type is the resource type on which a new resource type is based as you create it. A resource type inherits all of the dataclasses of the base resource type. Any resource type can serve as a base resource type. If it changes, the resource type that uses it as abase resource also changes. If data classes are added to the base resource type, the same data classes are added to all resource types that are based on it.s
No special configurationis required to allow a resource to be a base resourcetype. It occurs when you create another resource type and specify a base resource type for it. Most predefined asset types are based on the resource type: Asset. Most predefined contract types are based on the resource type: Contract. resource type or a resource type that is based on the Contract resource type. This feature lets you take advantage of built-in features, such as asset aggregation, reporting, accounting data, and so on.
For predefined asset types, the base resource type is the asset resource type. For contract types, most of the predefined resource types are based on the contract resource type. Basing asset and contract types on these two resource types takes advantage of built-in features, such as asset aggregation, reporting, accounting data, and so on.
See “About predefined resource types” on page 20.
About data classes
Data classes are the building blocks of a resource type.
CMDB Solution includes the predefined data classes that you can use. You can also create your own data classes. The predefined data classes make it easier for you to create resource type. Predefined dataclasses provide many ofthe elements
21Using resource types
About base resource types
that resource types need. To use a data class, create the data class and then add it to the resource types in which you want to use it. Data include one or more data class attributes. Parameters specify the characteristics of data class attributes.
They arethe foundations on which resource types arebuilt. Data classes represent the fieldsthat appear in a resource page. Imported, manually entered,or predefined data populates the fields.
Data classes specify the type of data you want to record about resources. Data class attributes define Data classes. Data class attributes appear as fields when you enter data.
Data class attribute parameters specify the characteristics of the attributes.
See “About data class attribute parameters ” on page 24.
You cannot modify or delete predefined data classes. You can modify and delete the data classes that you define.
About CMDB data classes
CMDB data classes are the templates for the data that is contained in the CMDB resource types.
See “About data classes” on page 21.
Table 3-1
CMDB data classes
DescriptionData class
Contains the data classes for tracking, asset merges, concurrent licensing, and upgrades of receiving items.
Asset Events folder
Lets you define an asset's status. Important for tracking the lifecycle of your assets and used in several reports.
Asset's Status
Associated Documents.Associated Documents
A history of the inventories that were run on a computer.Audit
Barcode value for the resource. Used with Barcode Solution, the barcode can greatly simplify the way assets are tracked and updated in the console.
Barcode
Color printing.Color
Comments.Comment
Using resource types
About CMDB data classes
22
Table 3-1
CMDB data classes (continued)
DescriptionData class
Details pertaining to a contract such as which computers it applies to, if the contract is renewable, the contact for the contract, and so forth.
Contract Details
Rates for the contract.Contract Rates
Cost center codes and descriptions.Cost Center Details
Ownership of cost center.Cost Center Ownership
Currency code.Currency Details
Currency rates.Currency Rate
Contains the data classes for all Datacenter resource types.Datacenter Classes
Double-sided printing.DoubleSided
Employee ID for user resource type.Employee ID
Barcode details.Identity
Internal reference details for a contract or license.Internal Reference
The last date and time an asset barcode was scanned.Last Barcode Scan
Click the edit icon to associate an asset with a location. To use reports includingcost center information about the asset, it must be associated with a location.
Location
Location address.Location Details
Free text field for entering the name of the manufacturer of the resource. The new asset type must include the predefined manufacturer data class if you create a new asset type and want to use reports.
Manufacturer
Maximum Network Printer resolution.Max Resolution
Free text field for entering the model name of the asset.Model
Network ID for the printer.Name (ID Network
Printer)
Owner and ownership percentage.Ownership Details
Phone number.Phone Details
23Using resource types
About CMDB data classes
Table 3-1
CMDB data classes (continued)
DescriptionData class
Serial number for the resource. The individualserial number for each asset is an important feature of the overall solution. Use Inventory Solution to track hardware and gather data, including the serial number.
Serial number
Name of the printers server.Server Name
Date of initial service and the wanted period between services.Service Details
Support parameters.Service Level
Agreement Details
Printer speed.Speed
Standard contractinformation. Start date, end date, and so forth.Standard Contract
Information
Value on the asset tag that is attached to the resource.System Number
About data class attributes
Data class attributes define the data that data classes store. After you add a data class attribute to a data class, you can edit certain aspects of the attribute. You can edit the description and control if it is hidden, but you cannot delete the description from the data class. A data class attribute cannot be added to a predefined data class.
See “About data classes” on page 21.
See “About data class attribute parameters ” on page 24.
About data class attribute parameters
Data classattribute parameters specify the characteristics of a data class attribute. For each data class attribute, you must specify values for each of the parameters.
See “About data classes” on page 21.
See “About data input masks” on page 25.
Character types in a field such as letters, digits, special symbols, spaces, and
so forth
Number of characters in a field
Using resource types
About data class attributes
24
Order of characters in a field
Actual characters in a field
Table 3-2
Data class attribute parameters
DescriptionParameter
Name of the data class attribute.Name
Description of the data class attribute.Description
The data type of the data class attribute.Type
About data input masks
Data input masks are ignored when data is imported into a field and in static lists. With each data class attribute, you can specify a data mask using the Data Mask parameter.
See “About data class attribute parameters ” on page 24.
The following table lists and describes the characters that can be used in defining a data mask and their meaning.
Table 3-3
Data mask characters
MeaningCharacter
Any letter. Entry required.A
Any letter. Entry optional.a
Any digit or space. Entry optional; +and -not allowed.9
Any digit (0 through 9). Entry required; +and -not allowed).0
Any letter, digit, space, +, or -. Entry optional; spaces are removed when data is saved.
*
Any letter, digit, +, or -. Entry required.#
Treat the masking character following the \as a regular character with no special masking properties.
\
All other characters not in the data mask must be as listed in the data mask.
All other characters
25Using resource types
About data input masks
About resource association types
A resource association type defines a child (to) to parents (from) relationship between one resource type to one or more resource types. This association lets child resources be linked to a parent resource. For example, a computer monitor can be associated with a computer. A cell phone can be associated with a user. A lease can be associated with several pieces of equipment. Associations make it easier for you to keep track of and to find data about related resources.
Resource associations are used to create organizational groups and views.
After a resource association type is created, a field is added to the child resource. The field lets you select a resource or resources of the type that the parent in the resource association type specifies. For example you can create a resource association type that links the Monitor resource type to the Computer resource type. The Monitor resource type includes a field that lets you select the computer that is associated with the monitor.
CMDB Solution includes numerous predefined resource association types, and you can also create your own.
See “About the resource association type page” on page 51.
Resource type relationships
Understanding the relationships between various resource types, especially the crucial organizational resourcetypes, helps you understand dependencies within the Configuration Management Database. Not all resource types can be directly associated with each other, but most can be indirectly associated with each other. Relationships are useful for reporting purposes. For example, a computer asset is associated with a user and the user is associated with a department. Although the asset cannot be directly associated with the department, the asset is reported as one ofthe departments assets. CMDB Solution creates an indirect relationship between the user and the department.
The following table shows direct resource type relationships. The Resource type column is the child (from) and the Direct relationship column is the parent (to).
Table 3-4
Direct relationships of resource types
Direct relationshipResource type
Cost Center, Location, User, Department, and AssetAsset
Creates no direct associationsCompany
Location and Manager (User)Cost Center
Using resource types
About resource association types
26
Table 3-4
Direct relationships of resource types (continued)
Direct relationshipResource type
Cost Center, Location, and Manager (User)Department
Cost Center and Manager (User)Location
Company, Department, Location, and Manager (User)User
The followingtable shows indirect resource type relationships, includingthe path that istaken to create the association. The resource type column is the child(from) and the Indirect relationship column is the parent (To).
Table 3-5
Indirect relationships of resource types
Indirect relationshipResource type
User > Company
User > Department
User > User
Asset
Creates no indirect associationsCompany
Creates no indirect associationsCost Center
Cost Center > UserDepartment
Cost Center > UserLocation
Existing Users can be specified as ManagersManager
Department > Cost Center
Department > Location
User
About the resource data class summary page
This resource data class summary page is applicable only to the predefined data classes that you cannot edit.
The page includes a list of resource types that use the following information:
The data class.
The number of resources that reported data.
The last time a resource has reported data.
Attributes that define the data class.
27Using resource types
About the resource data class summary page
Using resource types
About the resource data class summary page
28
Using resources
This chapter includes the following topics:
About resources
Resource categories
About merging resources
About the Resource Association Diagram
About item tasks
About resource list item tasks
About user-defined item tasks
About reports on owned resources
About resources
Resources are the items that Notification Server can manage. For example these items can include computers, phones, contracts, and users.
Resources are based on templates. These templates are called resource types. Predefined resource types are provided for commonly used resources and youcan also create your own. Whenever possible, use the predefined resource types.
See “About predefined resource types” on page 20.
With all resources, you can manually enter data or import it from an external source. Importing data is usually the most efficient method.
4
Chapter
Resource categories
Resource typesare grouped into categories for convenience. Resource types within a category have similar characteristics, a common purpose, or other similarities.
The following are the major resource categories:
Asset types.
Contract types.
Service types.
Datacenter types.
About merging resources
You can merge any two assets or contracts together into a single resource, even if they do not contain the same fields. However, you cannot merge an asset with a contract. This feature is useful if you have duplicate entries.
The data you merge does not need to be from the same resource type. Example: you can merge a Printer and a Network Printer.
When data is merged between resources, you select which resources data classes to keep. For data types common to both resources, you select which resources data class to keep. If a data class exists only for the resource that is discarded, the data for that data class is also discarded.
Associations from the resource that is to be deleted are transferred to the new resource. If there is more than one of the same type of association, the older association is deleted.
About the Resource Association Diagram
The Resource Association Diagram displays a graphic that shows a resource and all associated resources. Use the Resource Association Diagram to view relationships between assets, users, locations, departments, and cost centers.
From the Resource Association Diagram, you can select an associated resource to see the resources that are associated with it.
The Resource Association Diagram has the following two filters:
Association Type Filter
This filter lets you choose which association types you want to see displayed in the Resource Association Diagram.
Resource Type Filter
Using resources
Resource categories
30
This filter lets you choose which resource types you want to see.
About item tasks
In manysituations you need to edit a resource's data. Itemstasks simplify changing this data. Instead of opening a page and editing the resource, you can right-click the resource from the appropriate list of resources and select the appropriate task. Each resource type has a different list of item tasks.
A feature of item tasks is thatyou canselect multiple resources and make changes to all of them at the same time. For example, to assign a group of assets to a new cost center,you select the assets and specify the cost center. All assets are changed.
If there is not an item task for what you want to do, you can add one.
Table 4-1
Common item tasks
DescriptionItem task
Edits the resource.Edit
Opens the Resource Manager, which displays details about the resource.
Each user-defined item task is defined for a specific resource type and all of the resource types based on that resource type. If you define an item task for the Monitor resource type, the item task will be available only when you right-click on a Monitor resource. If you create an item task for a Software License resource type,the item task will be available for Software License. The task is also available for the other resource types that are based onit. Forexample, thetypes OSLicense, MacLicense, UNIX License, and Win32 License.
Resource Manager
About resource list item tasks
You can right-click on a resource that is listed on this page to perform item tasks. The following table lists and describes the most common item tasks. You can also access the item tasks from the Resource Display page.
Table 4-2
Common item tasks for a resource on the resource list page
DescriptionItem task
Edit the resource.Edit
31Using resources
About item tasks
Table 4-2
Common item tasks for a resource on the resource list page
(continued)
DescriptionItem task
Opens the Resource Manager, which displays details about the resource.
Resource Manager
Deletes aresource fromthe Configuration Management Database .
Delete
Approves a contract.Approve
Moves a resource.Move
Exports the resource data as an .XML file.Export
Opens a page that displays data about the resource. This data includes general, security, and audit data.
Properties
Includes Assignment Functions, Set Asset Status, Resource Association Diagram,and ResourceChange History.Descriptions are included in this table.
CMDB Functions
To perform the selected action for a resource without opening the Resource Display page. Available actions depend on the resource type. Includes Add Cost Item, Dispose of Asset(s), and Retire Asset(s). One common action is bulk editing.
CMDB Functions > action
Assign the asset to anOwner ,Cost Center, orLocation. Available actions depend on the resource type.
Note: When you assign an owner through an item task, all
previous ownership associations are deleted.
Assignment Functions
Sets thestatus of a resource. The status of a resourcedetermines how it is treated in reports and statistics. Options are as follows:
Active: Asset is in use
Disposed: Asset is no longer associated with the company
In Stock: Asset is available for use
Missing: Assetis stillassociated withthe companybut missing
On Order: Asset is soon available for use
Retired: Asset is no longer is use but not disposed
Returned to Lessor: Asset has been returned to Lessor
RMA: Asset has been returned to manufacture for repair or
replacement
Set Asset Status > action
Using resources
About resource list item tasks
32
Table 4-2
Common item tasks for a resource on the resource list page
(continued)
DescriptionItem task
When multipleresources areselected, choosethis optionto make changes to all selected resources.
Bulk Edit
Creates a copy of the resource. Clone a resource and make changes to the clone to enter data for similar resources.
Clone
Opens the Resource Association Diagram.CMDB Functions > Resource Association Diagram
Opens a page with a history of changes to the resource data.CMDB Functions > Resource Change History
Add a resource to a filter.Add To Filter
About user-defined item tasks
User-defined item tasks can be added to the right-click menu of a Resource List page. These item tasks are created using the Editable Task Link page. To access a user-defined item task, right-click a resource in the Resource List page, and select User Defined, and select the name of the item task.
User-defined item tasks let you quickly access any page accessible through a URL and pass parameters to the page based on data from selected resources. For example, you right-click a user and select a user-defined item task. The task uses the URL to pass the name of the user as a parameter to a phone list Web site.
Each user-defined item task is defined for a specific resource type and all of the resource types based on that resource type. If you define an item task for the Monitor resource type, the item task is only available when you right-click on a Monitor resource.
About reports on owned resources
If you enable reports on owned resources the reports are allowed to filter their results based upon the "Report on owned resources" permission.
This permission is applied to locations, cost centers, and departments.
See “About security scoping for reports” on page 42.
33Using resources
About user-defined item tasks
Using resources
About reports on owned resources
34
Using asset resource types and resources
This chapter includes the following topics:
About asset type resources
About the computer resource type
About asset life cycles
About retiring or disposing of an asset
About asset type resources
Assets represent physical items, whose data is added to the Configuration Management Database using a resource type. Asset Control tracks and manages any asset. Each asset can be associated with a user, department, cost center, and location.
About the computer resource type
The Computer resource type provides a large amount of built-in functionality for managing computer resources. This resource type also integrates tightly with data provided by Altiris Inventory Solution.
You can enter the computer data that Inventory Solution does not collect. For example this data can be a location or a cost center. This resource type also lets you override the data that Inventory Solution collects.
5
Chapter
About asset life cycles
You can track assets through all stages of the asset life cycle, from procurement to retirement.
The life cycle of a laptop computer is as follows:
Request Laptop: Purchase data is entered in the Configuration Management
Database using a purchase order. The asset status is set to On Order.
Acquire laptop: Specifics about the laptop are entered into the database. The
asset status is set to In Stock.
Deploy and inventory laptop: The laptop is issued to a user, then connected
to the network, and appears as an active asset as a result of inventory scans. The asset status is set to Active.
The laptop breaks and cannot be repaired, is used for three years, and then
becomes obsolete, or is lost or stolen.
Laptop is retired or end of life:The laptop is disposed of andno longer an active
asset in the database.
About retiring or disposing of an asset
After an asset can no longer be used in the enterprise, you must deactivate it. When you deactivate an asset, it no longer appears in reports and is no longer considered an asset. Depending on the age and usefulness of the asset and the reasons for deactivating it, you can choose either retirement or disposal.
If an asset is broken beyond repair or has become obsolete, dispose of it. You can record any of the costs that are associated with the disposal and remove the asset from the Configuration Management Database. If an asset can be recycled within your company, retire it. The asset remains in your company and appear in the Configuration ManagementDatabase but is no longer considered active. If a retired asset is reassigned to another user, change its status back to active.
When an asset is disposed, depreciation is calculated up to but not including the disposal date.
Using asset resource types and resources
About asset life cycles
36
Managing Configuration items
This chapter includes the following topics:
About contract type resources
About datacenter type resources
About service type resources
About computer resource types
About contract type resources
CMDB Solution lets you track several different types of contract data, including the following:
Location of contract documents
Service definitions
Contract details
A contract is a type of resource. You can associate contracts with other resources such as a computer, a printer, and a monitor.
CMDB Solution includes predefined contracts. These predefined contracts are Service Level Agreements and Contracts.
About datacenter type resources
Datacenter type resource types let you track IT management resources.
6
Chapter
Table 6-1
Datacenter resource types
DescriptionResource type
Includes three default resources (Server, Test, andWorkstation) to let you specify what type of function or role a computer has. You determine the computer type when you edit or create a new computer resource.
Computer Type
Power sources that the network uses. These are intended to be associated with UPS resources.
Power
Network resourceracks. Youcan specify which network resources (example: servers, power switches, hubs, and so on) are included in each rack.
Rack
Uninterrupted power supply resources. Includes the details on voltage, input and output frequencies, currents, and so on.
UPS
About service type resources
Service and system resource types are used to track critical infrastructure. They show theroles that computers play. For example, if youhave an Exchange Server, that computer provides an email service. The Exchange Server itself is listed as a System resource type, while email is listed as a service resource type.
About computer resource types
The Computer resource type provides a large amount of built-in functionality for managing computer resources. This resource type also integrates tightly with data provided by Altiris Inventory Solution.
The Computer resource type lets you enter data about a computer that Inventory Solution does not collect. For example you can enter a location or enter a cost center. The computer resource type also lets you override data about a computer that Inventory Solution does collect.
Warning: Create a new asset type for the computer data to track computer assets without Inventory Solution.
When you add computer data to the Configuration Management Database , the combination of Name and Domain for a computer must be unique.
Managing Configuration items
About service type resources
38
About CMDB Security
This chapter includes the following topics:
About CMDB security
About role-based security
About predefined security roles
About role-based security configuration
About scope-based security
About security scoping for reports
About CMDB security
In most environments, you have multiple users that need to have various degrees of access to CMDB Solution. Each type of user has different access needs. Setting up security properly ensures that your data is secure while permitting users to have the access they need. Example: A user might be a manager, who needs to have access to reports in the department the user manages. Another user, the administrator, requires permissions over everything.
CMDB Solution supports the following methods of security:
Role-based security
See “About role-based security” on page 40.
Scope-based security
See “About scope-based security” on page 41.
7
Chapter
About role-based security
In Notification Server security, a role is a group or individual with a set of Notification Server permissions. An individual is a Windows domain or local computer user.A group is a domain, local computer, orNotification Server defined group of users. After you configure a role, you can add a user to that role.
Role-based securitylets you set up privileges for performing tasksusing Symantec Management Console. It lets you control the creation of reports, collections, and policies. Role-based security lets you control the changing of security settings, the changing of incidents, and more.
We recommend that you add users who need access to CMDB Solution to a role, and then set the privileges for the roles accordingly. To assist you, a predefined role named CMDB Manager is provided.
See “About predefined security roles” on page 40.
See “About role-based security configuration” on page 40.
About predefined security roles
CMDB Solution includes a predefined security role named CMDB Manager. This role, along with others you can define, make it easier to grant the appropriate rights to users. If the rights and the permissions are adequate for your needs, then all you need to do is assign the appropriate users to each role. The privileges of each role can also be modified if needed.
See “About role-based security configuration” on page 40.
Table 7-1
Predefined CMDB security role
DescriptionRole
Has the rights to all CMDB-related elements except for configuration.
Can view, edit, and create assets and contracts (but not assetand contract types); can create reports and policies.
Has the access to the Resources, Tasks, and Reports.
Has view, create, edit, and approve privileges.
CMDB Manager
About role-based security configuration
You can modify the privileges of security roles if you need to.
About CMDB Security
About role-based security
40
When you create security roles, consider the following points:
To create a resource of a given resource type, the role must have read access
to theresource type. The role must have create children access tothe resource type defaultfolder. The role must have read andwrite access to the data classes and associations of the resource type.
To edit a resource, a role must have write permission on the folder of the
resource type.If the folder has never been moved, then it is the default folder).
If a new resource type is created, its default folder is set to its base resource
types default folder. For example, new license type items are created in the license default folder.
Note: The default folders should not be restructured.
See “About role-based security” on page 40.
See “About predefined security roles” on page 40.
About scope-based security
With scope-based security, you set permissions on items in the Symantec Management Console. You can set permissions on resource types, data classes, resource association types, item tasks, reports, folders, collections, and other items. Permissions let you control exactly what data is accessible by users or groups belonging to Notification Server security roles.
You mightwant to limit who can view or manage certain resource typesfor security reasons. You can limit what resource types are viewable and manageable from the Resources tab. You can set security for an individual resource type or a complete folder. For example, you can limit who can see the contract resource types. You can also limit who can change the permissions for the Computer resource type.
When you set security for resource types, you do not determine who can add or edit resources. You do determine who can view and manage the resource type itself.
You can also limit who can view or edit the data about a resource. For example, you might not need to limit which asset workers can view the list of computers. However, youmight want to limit who can view the accounting data forcomputers. You might want to allow only certain people to view the accounting data for computers. You might want to allow other people to both view and edit the accounting data for computers.
41About CMDB Security
About scope-based security
About security scoping for reports
You canset security-enabled reports to show only theassets that the user running the reports has security access to.
See “About scope-based security” on page 41.
The two fields for enabling this feature are as follows:
Associated security reporting
Report on Owned Resources
See “About reports on owned resources ” on page 33.
About CMDB Security
About security scoping for reports
42
Using organizational resource types and resources
This chapter includes the following topics:
About organizational resource types
About hierarchal resource types
About organizational groups and views
About organizational resource types
These resources are used to enter organizational and user data. They are used to reflect your own organization's structure. Organizational type resources are the essential building blocks upon which all of your other asset and contract data is based. Data for these resource types should be entered as you begin creating your resource management system. Careful thought and planning on how you set up organizational type resources in regard to your organizations situation is key to success.
See “About organizational groups and views” on page 45.
8
Chapter
Table 8-1
Organizational type resources
DescriptionResource type
Contains the company details, the internal and the external. For internal companies, it acts asa higher level of organization than the department level. In some situations, a single company consists of multiple smaller companies. This resource type lets you record data about these companies. If you have structured your resource management system as a single company, this resource type might not be needed for internal company data.
Company
Used to enter cost center code values, which are used for accounting related data. Summary data includes a list of all resources and the costs that are associated with the particular cost center. With each cost center, you can associate a location. However, if your organization is structured such that a single cost center that spans across multiple locations, you do not use this field. You would, however, be able to specify a cost center for each location. This resource type is a hierarchal resource type.
See “About hierarchal resource types” on page 45.
Cost Center
Contains departmentdata. Eachdepartment alsolets youspecify a manager for the department from the User resource type, location, and cost center. Summary data includes a list of all resources and the costs that are associated with the particular department. This resource type is a hierarchal resource type.
Department
A place that is associated with your business, such as a country, city, building, floor of a building, and office. Each location is associated with a cost center. This resource type is a hierarchal resource type.
Location
People in your company. This resource type is associated with the company and the department resource types. Although this resource type is an organizational resource type, it is not hierarchal. A common way to enter user data is to import the data.
If youimport yourdata andit containsdepartment data,you can use this data to automatically assign users to departments. To do this task you must enter the department data before you import the user data.
See “About organizational groups and views” on page 45.
User
Using organizational resource types and resources
About organizational resource types
44
About hierarchal resource types
Hierarchal resource types have a parent to child relationship. All hierarchal resource types are organizational resource types.
See “About organizational resource types” on page 43.
The following are hierarchal resource types:
Cost center
Department
Location
User
Filters can automatically be created for hierarchal resource types.
For example, you can select a location and deploy a software package to the users that are assigned to a location. You do not need to manually create a filter. The hierarchal relationship helps you work with resources. It makes working with a large number of hierarchal resources more manageable. When you select a hierarchal resourcetype you have the option to listthe resources that are assigned directly to the selected resource type. You can also list all of the resources that are assigned to the selected resource type and the resources of the children resource types. For example, a location named Headquarters has three child locations - First Floor, Second Floor, and Third Floor. If you select Headquarters, you can list the resources that are assigned to Headquarters only. Or you can list all of the resources that are assigned to Headquarters, First Floor, Second Floor, and Third Floor.
The following are the default organization views:
Assets by Cost Center
Assets by Location
Contracts by Location
Users by Department
Users by Location
About organizational groups and views
An organizational view is a hierarchical grouping of resources. Organizational views reflect a real-world structure of your organization. For example, you may create organizational views to group your resources by geographical location, or by department, or by network structure.
45Using organizational resource types and resources
About hierarchal resource types
The Symantec Management Console has a default Default organizational view that contains all known resources. As new resources are discovered in scheduled updates and added to the CMDB, they are automatically placed in the Default organizational view.The Default view organizes resources by type,with each type of resource (computer, user, package, etc.) being placed in the corresponding organizational group. You can manually copy the newly-discovered resources into the appropriate organizational views.
CMDB solutionautomatically assigns resources into organizational groups. There may be a delay between the resource being discovered and it being displayed in the appropriate organizational group. Each newly discovered resource is placed in the top level organizational group. The resource remains there until itis moved into the appropriate organizational group. It is moved when the organizational view refresh schedule runs.
You can remove resources from any organizational view except the Default view. When a resource is deleted from the CMDB, it is automatically removed from all organizational views using the delta update schedule.
You set up security by assigning the appropriate permissions for each security role on each organizational view, and on the organizational groups within each view. A permission that is assigned to an organizational group applies to all resources inthat group. By default the permission applies to all of the child groups. You cannot assign permissions directly to a particular resource.
Permission grants on a resource are accumulated across organizational views. A security role'spermissions are the union of the permissions that the resource has assigned through the organizational groups of the resource. If a security role has permission to perform an action on a resource in one organizational view, the role can perform that action. It can perform the action regardless of whether the permission isapplied to other organizational views that contain the sameresource. If a security role has read access in one organizational view and write access another, then it has both.
Implementing resourcesecurity in this way gives each security roleits own unique view of the available resources. The security role determines which resources its members can access, and what actions they can perform on those resources. Filters, targets,and report results are dynamic and automatically scoped according to therole of the user who owns them. Therefore, filters, targets, and report results always contain only the resources to which that user has the necessary access permissions.
Using organizational resource types and resources
About organizational groups and views
46
Using the CMDB interface
This chapter includes the following topics:
CMDB Global Settings page
Default values page
Default values page: Data entry for default values page
Display String Settings page
License Usage page
Organizational Hierarchy Settings page
Ownership Settings page
Report Scoping page
Resource List page
About the resource association type page
Resource Data Class page
About the resource association type page
Resource data entry tab settings page
Merge Resources page
Assign Computer's Ownership to be the Primary User task page
Clean Ownership task page
Duplicate Computer Merge task page
Duplicate User Merge task page
9
Chapter
Inventory Clean Up page
Inventory to Asset Synchronization task page
Resource Merge Rule task page
Update network resource location task page
Update Organizational Hierarchy task page
CMDB Global Settings page
This page lets you create custom status values to apply to resources. In some situations, your company might use a status that is not one of the predefined values. For example, a custom value of "On loan" might be applied to a resource being loaned to a user or department.
Table 9-1
Options on the CMDB Global Settings page
DescriptionOption
Lets you create a custom status value if the predefined values do not meet your needs.
Custom Status
Lets you add a custom status value.Add
Lets you select and delete a custom status value.Delete
Default values page
This page lets you select from a list of resource types so that you may change the resources defaultvalues. You can edit the resource type's default value in the Data entry default values page after you have select a resource type.
See “Default values page: Data entry for default values page” on page 48.
Default values page: Data entry for default values page
This page lets you set and edit default values for resource type fields. When you create a new resource from a resource type with default values, the default values you specify are included in the new resource. Using default values for the fields that do not change from resource to resource saves data entry time. For example, if your company uses one cost center for most purchases, it can be set as the
Using the CMDB interface
CMDB Global Settings page
48
default for the software purchase resource type. Then, you need to change the value only when a different cost center is used.
When data is imported, default values are not applicable.
Display String Settings page
This page lets you change the way that the predefined name of a report, resource, or field appears in the Symantec Management Console. For example, you can change the predefined name "Monitor" to appear as "Screen" in the Symantec Management Console .
In somesituations, your organization might use a namefor a resource type, report, or certain field that is not one of the predefined names. For example, monitor may be called "screen." In these situations, you can change a name throughout the solution. The Display AsSettings page is used to add and delete custom display strings.
Table 9-2
Options on the display as settings page
DescriptionOption
Displays the predefined name of the item.Original String
The new customized name of a field.Display String
Lets you choose to enable a string or enable a field change.Enable
Lets you edit a display string.Edit
Lets you add a new item name to change.Add new
Lets you choose to save changes.Save changes
Lets you discard changes.Cancel
License Usage page
This page lets you monitor the number of CMDB Solution licenses that users consume.
Organizational Hierarchy Settings page
This page lets you configure organizational hierarchy settings. You can choose if you want to update automatically and define how often you want the update to occur.
49Using the CMDB interface
Display String Settings page
Table 9-3
Options on the organizational hierarchy settings page
DescriptionOption
Lets you choose whether-or-not to update organizational hierarchies automatically.
Enable automatic updating of organizational hierarchies
Specifies an interval for updating organizational hierarchies.Update Interval
Specifies the maximum amount of time between updating organizational hierarchies.
Maximum Update Interval
Lets you choose to save changes.Save changes
Lets you discard changes.Cancel
Ownership Settings page
This page lets you specify resource ownership settings. Ownership of resources may involve single or multiple users. More than one user, department, or cost center can partly own the same asset. Assets can be transferred from one owner to another.
Table 9-4
Options on the Ownership Settings page
DescriptionOption
Lets you choose whether an asset can have multiple owners. If you select Multiple With Warning, you are warned when you assign ownership to an asset that already has an owner.
Ownership Style
Lets you specify what type of owner (user or department) has precedence in the event of a conflict of ownership.
Ownership Rule
Saves the changes that you have made.Save changes
Cancels the changes that you have made.Cancel
Report Scoping page
This page lets you specify filtering settings for security enables reports.
Using the CMDB interface
Ownership Settings page
50
Table 9-5
Options on the report scoping page
DescriptionOption
Lets the security-enabled reports filter the results based upon
resource associations between the logged on user and the
organizational types.
You can choose which association types you want to have used
for filtering the report results.
Enable associated security reporting
Lets the security-enabled reports filter the results based upon
the "Report on owned resources" permission. This permission is
applied against the locations, the cost centers, and the
departments.
Enable "Report on owned resources" permissionsecurityfor reporting
Lets you choose to save changes.Save changes
Lets you discard changes.Cancel
Resource List page
This page lists the resources that are associated with a resource type. From this page, you can access the Resource Display page, which lets you specify details for a new resource or for an existing resource.
About the resource association type page
This page lets you create and view associations between resource types.
Each associationforms a child-to-parent relationship between two resource types. The associationadds a field to the child resource for specifying a parent resource. For example, to associate a non-network printer with a computer, create an association wherethe printer is the child resourceand the computer is the parent. The association adds a field to the printer resource that lets you specify the associated computer.
Table 9-6
Resource association type page items
DescriptionItem
The name of the resource association type.Name
A description of resource association type.Description
The resource display page tab on which the field for selecting
the parent resource is added.
Tab Name
51Using the CMDB interface
Resource List page
Table 9-6
Resource association type page items (continued)
DescriptionItem
The child resource type in the association.From Type
The parent resource type in the association.To Type
Allows the asset to be associated with itself.Allow Association to
Itself
Specifies the minimum number of relationships that must be established between the child and parents.
Minimum Cardinality
Specifies the maximum number of relationships that can be established between the child and parents. If you do not want to limit the number of relationships, select the Unlimited check box.
Maximum Cardinality
Specifies themechanism style that is used to select an associated resource.
The options are as follows:
Contract Assigned User Picker
Generic Picker
Hierarchy Picker(for hierarchal parent resource types)
Hierarchy Picker Showing Children (for hierarchal parent
resource types)
List Resource Picker for Asset
Software Purchase Association Control
Selecting the check box with the same name as the resource association type allows a reverse resource association to be created between two resources. For example, the User check box for the Owners resource association creates an association from a user (parent) to an asset (child). Unless this box is selected, associations only be created from a child resource to a parent resource.
Enable Editing From
Resource Data Class page
This page lets you view data about a predefined data class. You can edit a custom data class. Predefined data classes cannot be edited.
Using the CMDB interface
Resource Data Class page
52
Table 9-7
Resource Data Class (edit) page
DescriptionOption
Each attribute in a data class makes up a cell ina table row. Select
to allow multiple rows in the data class.
For example, an invoice where multiple items can be listed
requires a multiple row data class.
Multiple Rows
Enter the name for the Resource Display page tab on which the
data class attributes are added as fields.
Data Entry Tab Name
Enter values for the data class attributes.Data Class Definition
Click to add a new attribute.Add New Attribute
About the resource association type page
This page lets you create and view associations between resource types.
Each associationforms a child-to-parent relationship between two resource types. The associationadds a field to the child resource for specifying a parent resource. For example, to associate a non-network printer with a computer, create an association wherethe printer is the child resourceand the computer is the parent. The association adds a field to the printer resource that lets you specify the associated computer.
Table 9-8
Items in the resource association type page
DescriptionItem
Resource association type name.Name
Description of resource association type.Description
The Resource Display page tab on which the field for selecting
the parent resource is added.
Tab Name
The child resource type in the association.From Type
The parent resource type in the association.To Type
Allow the asset to be associated with itself.Allow Association to
Itself
Specifies the minimum number of relationships that must be
established between the child and parents.
Minimum Cardinality
53Using the CMDB interface
About the resource association type page
Table 9-8
Items in the resource association type page (continued)
DescriptionItem
Specifies the maximum number of relationships that can be established between the child and parents. If you do not want to limit the number of relationships, select the Unlimited check box.
Maximum Cardinality
Specifies themechanism style that is used to select an associated resource.
The options are as follows:
Computer Type Association Picker
Contract Assigned User Picker
Generic Picker
Hierarchy Picker (for hierarchal parent resource types)
Hierarchy Picker Showing Children (for hierarchal parent
resource types)
Asset List
List
Resource Association Picker for Asset
Resource Tree Picker for Asset
Software Purchase Association
Selecting the checkbox with the same name as the resource association type allows a reverse resource association to be created between two resources. Example: Selecting the User checkbox for the Owners resource association lets you create an association from a user (parent) to an asset (child). Unless you select this box you can create associations only from a child resource to a parent resource.
Enable Editing From
Resource data entry tab settings page
The Resource Data Entry Tab Settings page lets you edit the order of the resource display page tabs.
A value is assigned to each tab. The order of the tabs from left to right is determined by the lowest assigned value to the highest value. If two or more tabs have the same value, which is the default except for the summary, comment, and general tabs, the order of those tabs is determined alphabetically. To change the value that is assigned to a tab, click the Edit button that is associated with the tab. In the dialog that opens, enter a value and click OK.
Using the CMDB interface
Resource data entry tab settings page
54
Table 9-9
Options on the resource data entry tab settings page
DescriptionOption
Opens a dialog box with a field to enter a value for the order.Edit icon
Lists the tabs whose order can be altered.Tab
Values in this field determine the order in which tabs are
arranged.
Order
Lets you choose to save changes.Save changes
Lets you discard changes.Cancel
Merge Resources page
This page is displayed when you select to merge two resources together.
Table 9-10
Merge Resources options
DescriptionOption
The resource that is kept after the merge and on which the
merged resource is based.
Primary Resource
The data for the resources to merge.Data Class Name
The data that is kept after the merge.Keep
Assign Computer's Ownership to be the Primary User task page
This page assigns the primary user of a computer as the computer owner, if an owner has notalready beenspecified. Youcan choose which computer collections to enable the policy for, or exclude from using the policy.
For the primary user to be assigned, data about the primary user must already be in the Configuration Management Database. The record is created from the inventory that the Altiris Agent on the computer sends.
55Using the CMDB interface
Merge Resources page
Table 9-11
Options on the Assign Computer's Ownership to be the Primary User task page
DescriptionOption
Lets you select computer filters to be included in the task.Include filters
Lets you select computer filters to be excluded from the task.Exclude filters
Specifies a schedule to regularly run the task.New Schedule
The task status table displays a list of scheduled task times. You can customize the results with the View, Group by, and Search options.
Task status table
Saves the changes that were made to the task.Save changes
Discards the changes that were made to the task.Cancel
Clean Ownership task page
Ownership relationships havethe potentialto renderdata invalidor problematic. For example, when several departments or users own the same resource. This page synchronizes the ownership resource association with the ownership data class. If there is a conflict between the two, the ownership resource association settings take precedence.
Table 9-12
Options on the Clean Ownership Task page
DescriptionOption
Specifies a schedule to regularly run the task.New Schedule
The task status table displays a list of scheduled task times. You can customize the results with the View, Group by, and Search options.
Task status table
Saves the changes that were made to the task.Save changes
Discards the changes that were made to the task.Cancel
Duplicate Computer Merge task page
This pagelets you create and schedule a task to automatically merge thecomputers that have been duplicated in the database.
Using the CMDB interface
Clean Ownership task page
56
Table 9-13
Options on the duplicate computer merge page
DescriptionOption
Lets you find duplicate computers. You can find computers by
using the system number, the serial number, or both.
Merge key
Lets you add the parameters to ignore.Ignore
Lets you select computer filters to be excluded from the task.Exclude filters
The task status table displays a list of scheduled task times. You
can customize the results with the View, Group by, and Search
options.
Task status table
Specifies a schedule to regularly run the task.New Schedule
Saves the changes that were made to the task.Save changes
Discards the changes that were made to the task.Cancel
Duplicate User Merge task page
This page lets you automatically merge the users that have been duplicated in the database.
Table 9-14
Options on the duplicate user merge task page
DescriptionOption
Duplicate users can be found through UserID and Domain, or
Given Name and Surname.
Merge key
Lets you select filters of users to be excluded from the task.User(s) to Exclude
The task status table displays a list of scheduled task times. You
can customize the results with the View, Group by, and Search
options.
Task status table
Specifies a schedule to regularly run the task.New Schedule
Saves the changes that were made to the task.Save changes
Discards the changes that were made to the task.Cancel
57Using the CMDB interface
Duplicate User Merge task page
Inventory Clean Up page
Inventory data can be manually or automatically deleted from the Configuration Management Database for computers no longer in use. Computers of any status (predefined or custom) can be cleaned up. For example, Retired, Disposed, or Returned to Lessor.
After inventory data for a computer is deleted, financial and other non-inventory data is still available.
Table 9-15
Options on the Inventory Clean Up task page
DescriptionOption
Lets you target assets based on their status.Asset Status
Lets you select resource filters to be included in the task.Include these
resources
Lets you select resource filters to be excluded from the task.Exclude these
resources
Specifies a schedule to regularly run the task.New Schedule
The task status table displays a list of scheduled task times. You can customize the results with the View, Group by, and Search options.
Task status table
Saves the changes that were made to the task.Save changes
Discards the changes that were made to the task.Cancel
Inventory to Asset Synchronization task page
Inventory Solution is used to gather computer and device inventory data, which is stored inthe ConfigurationManagement Database. Theinventory toasset data synchronization taskcopies the following data (that Inventory Solution gatherers) for computers and devices:
Serial number
System number
Manufacturer
Model
Copying this data lets you modify or add data through CMDB Solution and not lose the data each time Inventory Solution re-collects data. If CMDB Solution did
Using the CMDB interface
Inventory Clean Up page
58
not copy, but instead modified the data that Inventory Solution collects, the changes that were made would be lost the next time Inventory Solution collects data.
The CMDB Solution synchronization feature updates the computer data that was copied from Inventory Solution for added or removed computers. Computer and device data you have entered through CMDB Solution remains intact when the update is made. For example, you use Inventory Solution to collect data on your computers, but no system number data is available as part of the inventory. You use CMDB Solution to enter system number data for each computer. Inventory to asset datasynchronization updates the computer data in CMDB Solution, butdoes not erase any system number data.
Table 9-16
Options on the Inventory to Asset Synchronization task page
DescriptionOption
Lets you select computer filters to be included in the task.Include filters
Lets you select computer filters to be excluded from the task.Exclude filters
Specifies a schedule to regularly run the task.New Schedule
The task status table displays a list of scheduled task times. You
can customize the results with the View, Group by, and Search
options.
Task status table
Saves the changes that were made to the task.Save changes
Discards the changes that were made to the task.Cancel
Resource Merge Rule task page
To merge duplicate resources for resource types other than computers and users, you must create a merge rule with the ResourceMerge Rule task. Default resource type data classes define the merge keys that the merge rules are based upon. For example, when you create a merge rule for desk phones, when you select desk phone, the list of available merge keys is limited to the default data classes for telephone like phone number.
Additional resource lookup keys can be defined using Connector Solution and appear in the Merge Key drop-down list.
When you merge two resources, you select one of them to be the resource to keep, and you select, for each data class, to keep data from one of the other resources. The resource that is not kept is deleted. If the resource that is not kept has a data class that the kept resource does not have, that data is deleted.
59Using the CMDB interface
Resource Merge Rule task page
You can merge two assets, and you can merge two contracts. You cannot merge an asset and a contract. The resources that you merge do not have to be of the same data type. For example, you can merge a Printer with a Network Printer.
Associations from the resource that is not kept are transferred to the resource that is kept. If there is more than one of the same type of association, the older association is deleted.
You can use tasks to automate recurring resource merges.
A data class that a user adds to a resource type cannot be used as a merge key.
Table 9-17
Options on the Resource Merge Rule task page
DescriptionOption
Lets you select a resource type to be merged.Resource Type
Lets you select the data class to be merged.Merge key
Lets you choose the filters to ignore.Ignore
Specifies a schedule to regularly run the task.New Schedule
The task status table displays a list of scheduled task times. You can customize the results with the View, Group by, and Search options.
Task status table
Saves the changes that were made to the task.Save changes
Discards the changes that were made to the task.Cancel
Update network resource location task page
CMDB Solution can be configured to automatically set the location of an asset based on the subnet that is associated with the asset.
Update Network Resource Location uses the subnet that is assigned to a location through the location resource type. Then, based on the subnet of an asset that is determined through Inventory Solution, the location of the asset is assigned.
The task can be run manually or on a schedule. Some situations require the task to run once to set the location, and then you manually maintain the asset location data. Other situations require the task to run regularly. You might want to make a collection of assets to exclude from the task. For example, the laptop computers of users who travel to different locations frequently.
Using the CMDB interface
Update network resource location task page
60
Table 9-18
Options on the Update Network Resource Location task page
DescriptionOption
Lets you select computer filters to be included in the task.Include filters
Lets you select computer filters to be excluded from the task.Exclude filters
Specifies a schedule to regularly run the task.New Schedule
The task status table displays a list of scheduled task times. You
can customize the results with the View, Group by, and Search
options.
Task status table
Saves the changes that were made to the task.Save changes
Discards the changes that were made to the task.Cancel
Update Organizational Hierarchy task page
This page lets you update the organizational hierarchy groups to match the associations that are in the database.
Table 9-19
Options on the Update Network Resource Location task page
DescriptionOption
Lets you choose the organizational hierarchies to update.UpdateOrganizational Hierarchies
Lets you choose whether-or-not to only update the resource
membership.
Only update resource membership
Specifies a schedule to regularly run the task.New Schedule
The task status table displays a list of scheduled task times. You
can customize the results with the View, Group by, and Search
options.
Task status table
Saves the changes that were made to the task.Save changes
Discards the changes that were made to the task.Cancel
61Using the CMDB interface
Update Organizational Hierarchy task page
Using the CMDB interface
Update Organizational Hierarchy task page
62
A
about 17 asset
life cycles 36
asset type resources
about 35
assets
retiring 36
assign computer's ownership to be the primary user
about 55
B
base resource types
about 21
C
clean ownership task
about 56
CMDB data classes
about 22
CMDB Global Settings
about 48
CMDB rules
about 18
CMDB Solution
about 11
computer resource type
about 35
computer resource types
about 38
configuration
about 17
contract type resources
about 37
D
data class attribute parameters
about 24
data class attributes
about 24
data classes
about 21
data entry for default values page
about 49
datacenter type resources
about 37
default values page
about 48
display as settings page
about 49
Duplicate Computer Merge page
about 56–57
H
hierarchal resource types
about 45
I
inventory clean up
about 58
inventory to asset data synchronization
about 58
item tasks
about 31 user defined 33
L
license usage page
about 49
M
merging
duplicate resources 59
merging resources
about 30
O
organizational groups and views
about 45
Index
Organizational hierarchy settings page
about 49
organizational resource types
about 43
ownership settings page
about 50
P
percentage ownership of resources 17 predefined resource types
about 20
predefined security roles
about 40
R
report scoping page
about 50
report security scoping
about 42
reporting on owned resources
configuration 33
Resource Association Diagram
about 30
resource association type page
about 51, 53
resource association types
about 26
resource data class page
about 52
resource data class summary page
accessing 27
resource data entry tab settings
about 54
resource list item tasks
about 31
resource list page
about 51
resource type relationships
about 26
resource types
about 19 predefined 20
resources
about 29 categories 30
role based security
about 40 configuration 40
S
scope based security
about 41
security
about 39
service type resources
about 38
U
Update Network Resource Location
about 60
Index64
Loading...