User roles

Each user can perform actions based on the roles that are assigned to them in the organization. Each user is assigned one or more of the following roles.

When using XClarity One on premises, you can enable the View only toggle to give users read-only privileges, meaning that they can only view information. If this toggle is disabled, users can view information and perform actions on those resources.

• User administrator

  An organization must have at least one active user administrator; however, at least two user administrators is highly recommended for redundancy and security.

  User administrators can perform the following actions.

  • View user information, including user profiles, user groups, events, alerts, todos, and jobs

  • Manage users, including adding, deleting, modifying, enabling, and disabling users, and modifying roles for users

  • Manage authentication, including resetting passwords and multifactor authentication for local users

  • Manage user groups, including adding, deleting, modifying, enabling, and disabling groups, importing externally defined LDAP groups, modifying group membership and roles

  • Manage user-related todos, including dismissing and restoring todos

  • Manage user-related alerts and events, including dismissing and restoring alerts, and adding, editing, and removing exclusion rules

  • View external identity provider configurations

• Hub administrator

  Hub administrators can perform the following actions.

  • View hub information, including hub details, discovered and managed devices, events, alerts, todos, jobs, vulnerabilities, and service tickets

  • Manage hubs, including adding (connecting), removing (disconnecting), and enabling or disabling hubs

  • Migrate devices and artifacts from Lenovo XClarity Administrator

  • Manage hub-related todos, including dismissing and restoring todos

  • Manage hub-related alerts and events, including dismissing and restoring alerts, and adding, editing, and removing exclusion rules

• Device administrator

  Device administrators can perform the following actions.

  • View device information, including device details (inventory, health, usage metrics, warranties), collections, event forwarders, events, alerts, todos, jobs, vulnerabilities, and service tickets

  • Discover and manage devices, including discovering and managing devices in your data center, and migrating devices and artifacts from XClarity Administrator

  • Power on, off and restart devices

  • Manage collections of devices, including adding, deleting, modifying collections and monitoring health and usage metrics for the entire collection

  • (Cloud only) Remotely access the management controller and server console

  • Manage the repositories of firmware, device settings, and operating systems

  • Manage device-configuration templates, including adding, removing, modifying templates, and deploying templates to devices

  • Manage device-related todos, including dismissing and restoring todos

  • Manage device-related alerts and events, including dismissing and restoring alerts, and adding, editing, and removing exclusion rules

  • Manage scheduled jobs

  • Manage external certificates for device

  • Export data as a report

  • Assign support contacts to specific devices and collections

  • Collect and upload device service data to Lenovo Support

  • (On premises only) View and manage device service data