Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

User Roles and Permissions

 

Junos Space Network Management Platform provides role-based access control (RBAC). A user is allowed access to the Junos Space Network Management Platform and applications after authentication and authorization.

A Junos Space Super Administrator or User Administrator controls the workspaces that users can access, the system resources that a user can view and manage, and the tasks available to users within a workspace. RBAC is enforced in the Junos Space user interface navigation hierarchy by workspace, task group, and task. A user can access only those portions of the navigation hierarchy that are explicitly granted through access privileges. For more information about role-based access control, see the Role-Based Access Control Overview topic of the Junos Space Network Management Platform User Guide at Junos Space Documentation.

While Junos Space Platform allows creating users with custom permissions, it also has a set of predefined user roles. These predefined roles cannot be modified or deleted.

For information about predefined user roles in Junos Space Platform, see the Predefined Roles Overview topic of the Junos Space Network Management Platform User Guide at junos Space Documentation. For information about predefined user roles for Junos Space Service Now and Junos Space Service Insight, see the following:

Junos Space Service Now Predefined User Roles

Table 1 lists the predefined roles and associated tasks permitted in Service Central and Administration workspaces of Junos Space Service Now.

Table 1: Predefined Roles for the Service Now Application

Role

Workspace

Task Groups and Tasks

Service Now Admin

Administration

  • Incident Filters: Create basic filter, create advanced filter, import incident filters, modify incident filters, delete incident filters, export incident filters, reorder incident filters, enable incident filters, disable incident filters, and assign incident filters to a domain

  • Auto Submit Filters: Create basic filter, create advanced filter, import auto submit filters, modify auto submit filters, delete auto submit filters, export auto submit filters, reorder auto submit filters, enable auto submit filters, disable auto submit filters, and assign auto submit filters to a domain

  • Global Settings: Manage directive file, configure an FTP server for uploading core files, manage SNMP traps, and configure Service Now partner certificates on a Service Now end customer, configure advanced settings

  • Address Group: Create address groups, associate address groups with devices, modify address groups, delete address groups, and assign address groups to domains

  • Device Groups: Create device groups, modify device groups, set a device group as the default device group, associate address groups with device groups, assign device groups to domains, and delete device groups from Service Now

  • Service Now Devices: Add devices to Service Now, export device inventory information, associate devices with autosubmit policies, associate devices with device groups, check FTP server configuration, configure RSI and log file collection on devices, create on-demand incidents, associate devices with address groups, export device information, install event profiles on devices, request Return Materials Authorisation (RMA), uninstall event profile from devices, view exposure of devices to known events, view incidents generated on Service Now, assign the Service Now devices to domains, and delete devices from Service Now

  • Email Templates: Modify default content of an Email template and restore the modified content of an Email template to its default content

  • Event Profiles: Add AI-Scripts bundles to Service Now, set an AI-Scripts bundle as the default AI-Scripts bundle in Service Now, delete AI-Script bundles, create event profiles, import event profiles, export event profiles to an XML file, push event profiles to devices, clone event profiles, set an event profile as the default profile, view events included in event profiles, view devices associated with event profiles, assign event profiles to domains, and delete event profiles from Service Now

  • Auto Submit Policy: Create autosubmit policies, export incident reports, modify autosubmit policies, change the dampening status of autosubmit policies, assign autosubmit policies to a domain, and delete autosubmit policies from Service Now

  • Organization: Add an organization to Service Now, add end customers to organizations, check the connection status of Service Now with Juniper Support System (JSS) or with a Service Now partner, modify organizations, associate address groups with organizations, delete organizations, update core file upload configuration, view information messages received from JSS, and assign organizations to domains

  • Product Health Data Collection (PHDC): Configure PHDC, modify PHDC, delete PHDC, enable PHDC on devices, disable PHDC on devices, reschedule PHDC on devices, retry PHDC on failed devices, abort PHDC on devices, delete product health data (PHD) files, download product health data files, export information about product health data and devices

Service Central

  • Incidents: Create autosubmit policies, view end-customer cases in Case Manager, update end-customer cases, export JMB to HTML, export incident summaries to Excel, assign an owner to incidents, view end-customer cases created in Service Now, flag incidents to users, submit cases to JSS or a Service Now partner, view KB articles related to an incident, delete incidents, view tech support cases in Case Manager, update tech support cases, upload core files to JSS, Upload attachments to cases, and view JMB associated with an incident

  • Information: View iJMBs, export iJMBs to HTML, delete iJMBs, assign messages received from JSS to connected members, assign ownership to messages, delete messages, Flag messages to users, and scan devices for impact based on messages received from JSS

  • View Tech Support Cases: View cases in Case Manager, update cases, and upload text or binary attachments to cases

  • View End Customer Cases: View end-customer cases in Case Manager and Update end-customer cases

  • Device Analysis: Delete BIOS validations, export BIOS validations to Excel, view device health data, and view devices on which PHD are collected, export information about product health data and devices, download product health data files

  • JMB Errors: Download error JMBs and delete error JMBs

  • Suppressed Events: Delete suppressed JMBs, create incidents for the suppressed JMBs, view the suppressed JMBs

  • Notifications: Create notifications, edit notification filters and actions, copy notifications, delete notifications, enable or disable notifications, and assign notifications to domains

Service Now Read Only

Administration

Service Now Devices: Export event profiles, export devices, view exposure of devices to known events, and create on-demand device snapshots, export information about product health data and devices, download product health data files

Service Central

  • Incidents: Export a JMB in HTML format, view JMBs, export incident summary to Excel, and view tech support and end-customer cases in Case Manager

  • JMB Errors: Download error JMBs

  • Tech Support cases: View tech support cases in Case Manager and update cases

  • Information: View iJMBs, export iJMBs to HTML and scan devices for impact based on messages received from JSS

  • Device Analysis: Export BIOS validations to Excel, view device health data, and view devices on which PHD are collected, export information about product health data and devices, download product health data files

  • Suppressed Events: Delete suppressed JMBs, create incidents for the suppressed JMBs, view the suppressed JMBs

  • Notifications: Create notifications

  • End-customer cases: View end-customer cases in Case Manager

Service Now Unrestricted User

Administration

Service Now Devices: Export devices, view exposure of devices to known events, create on-demand device snapshots, and export event profiles, export information about product health data and devices, download product health data files

Service Central

  • Incidents: Export JMBs to HTML, view JMBs, export incident summaries to Excel, view tech support and end-customer cases in Case Manager, update tech support and end-customer cases, delete incidents, submit cases to JSS, assign ownership to incidents, and flag incidents to users

  • Tech Support cases: View tech support cases in Case Manager and update cases

  • JMB Errors: Download error JMBs and delete error JMBs from Service Now

  • Suppressed Events: Delete suppressed JMBs, create incidents for the suppressed JMBs, view the suppressed JMBs

  • View Tech Support Cases: View tech support cases in case manager, update cases in case manager

  • Information: Assign owners to messages received from JSS, flag messages received from JSS to users, delete messages received from JSS, assign messages received from JSS to end customers, export iJMBs to HTML, view iJMBs, and delete iJMBs from Service Now

  • Device Analysis: Delete BIOS validations, export BIOS validations to Excel, view device health data, and view devices on which PHD are collected, export information about product health data and devices, download product health data files

  • View End Customer Cases: View end-customer cases in Case Manager and update end-customer cases

  • Notifications: Create notifications, edit filters and notifications, copy notifications, enable or disable notifications, assign notifications to domains, and delete notifications

Junos Space Service Insight Predefined User Roles

Table 2 lists the predefined roles and associated tasks permitted in the Insight Central workspace of Junos Space Service Insight.

Table 2: Predefined Roles for the Service Insight Application

Role

Task Groups and Tasks

Service Insight Administrator

  • Exposure Analyzer: View PBNs that can impact devices, generate EOL reports, and generate PBN reports

  • EOL Reports: Regenerate EOL reports, export EOL reports, and delete EOL reports from Service Insight

  • PBN Reports: Regenerate PBN reports, export PBN reports, and delete PBN reports

  • Targeted PBNs: Scan for impact, flag PBNs to users, e-mail PBN to users, assign owners to PBNs, and delete PBNs from Service Insight

  • Notifications: Create notifications, edit filters and actions in notifications, copy notifications, delete notifications, enable or disable notifications, and assign notifications to domains

Service Insight Read Only User

  • Exposure Analyzer: View PBNs that can impact devices

  • EOL Reports: Export EOL reports in Excel format

  • PBN Reports: Export PBN reports in Excel format

  • Targeted PBNs: Scan devices for that are impacted by the PBNs

Service Insight Unrestricted User

  • Exposure Analyzer: View PBNs that can impact devices, generate EOL reports, and generate PBN reports

  • EOL Reports: Regenerate EOL reports, export EOL reports, and delete EOL reports

  • PBN Reports: Regenerate PBN reports, export PBN reports, and delete PBN reports

  • Targeted PBNs: Scan for impact, flag PBNs to users, e-mail PBNs to users, assign owners to PBNs, and delete PBNs from Service Insight

  • Notifications: Create notifications, edit filters and actions in notifications, copy notifications, delete notifications from Service Insight, enable or disable notifications, and assign notifications to domains