Full Control access level in XIR3.1

server administration XI Server Discussion
1

I am in process of upgrading from XIR2 to XIR3.1 SP2. I noticed that once I migrated my CMS database over to the new installation that the Full Control access level does not contain all the rights granted. Has anyone else seen this? If I view the Included Rights for the access level Full Control in the CMC, there are many rights left unassigned, which lead to the Administrator account not having access to everything. For example, the Instance Manager.

My guess is that new or modified rights in the new version default to “Unassigned” when you migrate a CMS database over.

My question is if there is a way to modify the Full Control access level. I can create a new access level (“Super Full Control” - sounds dumb doesn’t it) with all the rights, but it will not let me modify the included rights on the default Full Control access level. The button to Add/Remove Rights is greyed out.

I think this is a huge shortcoming unless there is a solution. I am going to have to find every area where the Administrator group is being assigned “Full Control” and assign it to my new access level.

Any help is greatly appreciated, thanks.

CSGDrew :us: (BOB member since 2008-02-12)

2

Well, it has nothing to do with SP2 or Migration. We have a clean, new install of XI 3.1, and the Full Control access level has a whole bunch of unassigned rights. :shock: I’m not sure why. Maybe we need to create an Uber Control access level. :rotf:

MichaelWelter :vatican_city: (BOB member since 2002-08-08)

3

Uber Control haha. Nice.

Yeah, so if I could modify the Full Control Access level to include those rights I would be happy.

The biggest thing I’ve noticed is the Instance Manager. By default, no user or group is granted access to it.

I even went into the Full Control access level’s User Security properties and made our Administrator account have “Super Full Control” (my uber access level I created) to the Full Control object. I hoped this would then allow me to modify the rights that Full Control has, but it did not work.

CSGDrew :us: (BOB member since 2008-02-12)

4

If you copy the Full Control access level, you could then modify the copy. That would at least get you part of the way there. 8)

MichaelWelter :vatican_city: (BOB member since 2002-08-08)

5

Great idea, Michael - regretfully, copying a predefined access level is not possible in 3.1 although it works fine in 3.0. :cry: Not sure what happens after SP2…

Orange :netherlands: (BOB member since 2006-09-18)

6

I was able to copy the Full Control access level in 3.1 SP2. It worked fine.

CSGDrew :us: (BOB member since 2008-02-12)

7

Then all I need to do is find some 12 hours of my time to run the SP2… :slight_smile:

Orange :netherlands: (BOB member since 2006-09-18)

8

Yeah… literally. It took like 9 hours to install SP2 on my Dev server.

CSGDrew :us: (BOB member since 2008-02-12)

9

:mrgreen: and it’s a fresh install I suppose. So talking about an upgrade from SP1 to SP2 9 days ???

10

Its not a fresh install - It just took one day to install and I did some very high level tests the next day and we were good. So 2 days for me. I had no need to reconfigure anything - all my reports/universes/CMC settings were intact.

CSGDrew :us: (BOB member since 2008-02-12)