Configuration of Access Control for LFMT Users

This section describes where and how to configure GAX Role privileges to restrict/grant access to LFMT functionalities.

Role-based access control using Genesys Administration Extension (GAX)

1. Log into GAX, and navigate to Configuration
2. From the Environment section, select Application Templates
3. Find and click the GAX Template associated with the particular GAX instance that is being used for LFMT - i.e. "Genesys_Administrator_Extension_900"
4. Click Import Metadata and import the lfmt-gax-template-metadata.xml file
5. Click Save
6. From Configuration / Accounts / Roles - add a new LFMT Role - i.e LFMT
7. From the Role Members tab - add the relevant Users/Groups to the new LFMT Role
8. From the Assigned Privileges tab - locate the gax-lfmt section and check the relevant privileges (i.e. only "Available log packages") for this new LFMT Role
9. Click Save
10. On GAX re-login, the respective Users/Groups will be assigned the functionality based on the LFMT Role privileges





Example











List of Available Privileges


The following role privileges can be allowed/denied for the role configuration:

* Available log packages
* Collection schedules
* Create Collection Schedules
* Delete Collection Schedules
* Force log collection
* Indexing and scrubbing configurations
* Log file packaging
* Site configuration
* Start scheduled collections
*Stop scheduled collections

Role-based access control using Genesys Administration (GA)

Use these steps to enable Role-based access control in Genesys Administrator.

1. Login to GA, and select the Provisioning tab.
2. Select Environment > Application Templates in the left navigation menu.
3. Select the Genesys Administration Extension template and click Edit.
4. Click Import Metadata to import the metadata for the LFMT client application template.
5. Click Add on the “choose metadata XML file to import” dialog.
6. Select the lfmt-gax-template-metadata.xml file and click Open. The file is uploaded.
7. Click Save in the top menu to save the metadata.
8. Select Roles in the left navigation menu.
9. Click New and add a name for this role, such as LFMTTest.
10. Select the Role Privileges tab. In the Add/Remove Product section, scroll to the entry for the current Genesys Administrator Extension – LFMT Plug-in release (such as Genesys Administrator Extension – LFMT Plug-in 8.1.3000.00) and select it. A new section called “Genensys Administrator Extension – LFMT Plug-in ” is added.



The following role privileges can be allowed/denied for the role configuration:

* Available log packages
* Collection schedules
* Create Collection Schedules
* Delete Collection Schedules
* Force log collection
* Indexing and scrubbing configurations
* Log file packaging
* Site configuration
* Start scheduled collections
* Stop scheduled collections
11. Click Save in the top menu.
12. In the Roles tab, select the LFMTTest role and click Edit.
13. In the Configuration tab, expand the Members section and click Add, to add this LFMTTest role to the desired user profiles.
14. In the list of user names, select one or more users and click Ok.
15. The selected users will be displayed in the Members list as enabled for this LFMTTest role.
16. Click Save in the top menu to save the member assignments to this role.