1 Create DashboardOnly Role

For the Customers we are creating a role that has can only see dashboards that are shared with the Customer group.

These instructions are compiled using vROPS 6.1

1.1 Create the Role

Let’s create the role.

1. Login as Admin
2. Go to Administration and the on Access control
3. Click on Roles
4. Create a new Role (green plus) and give it the name DashboardOnly
5. Click ok and then select the newly created role
6. Click on the pencil that is next to permissions to edit the roles permission

1. Select only the following rights:

                The Views Management Items are ONLY required if your Dashboards contain Views.

2 Group, Users and Objects

After we created the role we need to create a group assign users to it (if it is a local group) and then assign this group to the DeashboardOnly role as well as make sure the users can only see the objects he or she should see.

You can either import an AD group or create a local group. The local group is created in VROPS only and has the advantage that I can pick and choose what users I want it there without having to create extra AD group for it, however it also means that you have to administer users and groups in AD as well as in vROPS.

2.1 Import AD group

To import a AD group follow these steps:

1. Click on Import Group
2. Select a search string and click on Search
3. Select the group you like to import
4. Click on Next and continue with the section Assign Role and Objects

2.2 Create local Group

To create a local group follow these steps:

1. Click on Add
2. Give the group a name
3. Click on Next

1. Now you can select the members that your local group should contain. These could be local user accounts or imported accounts.
2. Now continue with the section Assign Role and Objects

2.3 Assign Role and Objects

Independent weather if you imported or create a group we continue to assign now objects to this group.

1. Use the pulldown menu to select the DashboardOnly group
2. And then tick the box Assign this role to the group
3. Now either select a custom Group that contains all the objects for the Dashboards or chose the Objects using the Infrastructure library.
4. Select the Object or Group you want to use
5. Ticking the Propagation box will select all descendants of this object.
6. Click on Finish

3 Remove default Dashboards

Now that we created the needed Groups and assigned them the role and the Objects we can now assign them the dashboards. We are also need to take away the default ones.

3.1 Remove Share

First of all we need to remove the standard shared dashboards.

1. Go to Content | Dashboards
2. From the Gear Icon pulldown menu select Share Dashboards

1. Select all Dashboards and then select Stop Sharing
2. Select all the dashboards again and this time drag them onto your Administrator group

3.2 Assign the Customer Dashboards

We now need to assign the Dashboards the Users should see to the new Group.

1. Go to Content | Dashboards
2. From the Gear Icon pulldown menu select Share Dashboards
3. Select all the dashboards you want the customer to use and drag them onto the new group
4. The new group should now be showing the dashboards

3.3 Remove the 3 default dashboards

The 3 dashboards (Recommendations, Diagnose and Self Health) cannot be unshared that easy. To remove them we need to delete a file on the vROPS nodes. Please note that this works only for users that have NOT been logged on before. This solution works only for new user that have not been logged in yet.

1. Login to the vROPS node as root
2. Delete (or better move) the following file. (Rename doesn’t seam to work)
   /usr/lib/vmware-vcops/tomcat-web-app/webapps/ui/dashboards/ootb/All.json