Hiding unscoped features in FlexNet Manager Suite

Report Inappropriate Content · ‎Dec 12, 2018

Summary

Depending on product settings, some dashboard widgets and the enterprise views may not be tailored to the access rights assigned to an operator. FlexNet Manager Suite 2018 R1 introduced a new setting to hide these items whenever there is a risk that an operator could view data they are not entitled to access.

Synopsis

Depending on product settings, some dashboard widgets and the enterprise views may not be tailored to the access rights assigned to an operator. To prevent this, FlexNet Manager Suite 2018 R1 includes a new setting to hide this dashboard view data where it is a considered a risk that an operator could view information not meant for them.

Discussion

A new setting ShowManagementDashboardForScopedUsers has been created in the ComplianceTenantSettings table. It is only adjustable using SQL Server Management Studio. (A ?scoped? operator is one whose access is limited to specific enterprise groups.)

For all customers, this setting is set to true (1) by default. This value provides support for previous releases, meaning that no further change is made to the ComplianceTenantSettings database table.
If this value is manually set to false (0), the following will occur:

1. In the System Settings page, Licensing tab, a warning will be displayed if either the first option Licenses owned by their groups, with counts only for their groups or the third option All licenses, with counts only for their groups is selected. The selection of the second option Licenses owned by their groups with enterprise-wide counts won?t impact the hiding of unscoped features, therefore no warning is displayed for this option.

?

2. For operators restricted to specific enterprise groups, if option one or three above has been selected, the dashboard is not displayed and the corresponding Management Dashboard menu item is hidden.

?

3. For operators restricted to specific enterprise groups, if option one or three above has been selected, the enterprise-wide views (Publisher Summary, License Summary and Product Summary) are not accessible, and do not appear in the main FlexNet Manager Suite menu.
The unrestricted License Compliance menu includes the following:

?

When ShowManagementDashboardForScopedUsers has been set to 0, and option one or option three for license views is selected, and an operator is restricted to views from certain enterprise groups, this reduced menu is displayed:

Additional Information

The settings 'ScopeLicenseCounts' and 'ShowManagementDashboardForScopedUsers' can be viewed via SQL Server Management Studio with the following:

SELECT
	SN.SettingNameID,
	SN.Name,
	CTS.SettingValue
FROM
	SettingName AS SN
	INNER JOIN ComplianceTenantSetting AS CTS
		ON SN.SettingNameID = CTS.SettingNameID
WHERE
	SN.SettingNameID IN (51, 188)

These can be set if preferred via SQL Server Management Studio with:

-- ScopeLicenseCounts
UPDATE
	ComplianceTenantSetting
SET
	SettingValue  = '1'
WHERE
	SettingNameID = 51

-- ShowManagementDashboardForScopedUsers
UPDATE
	ComplianceTenantSetting
SET
	SettingValue  = '0'
WHERE
	SettingNameID = 188

The full values for these settings are as follows:

ShowManagementDashboardForScopedUsers
- 0: Only shows the Management dashboard for un-scoped users.
- 1: Shows the management dashboard even if a user is scoped (default).
ScopeLicenseCounts
- 0: Don't scope counts, but scope licenses as normal.
- 1: Scope counts, and scope licenses as normal (default)
- 2: Scope counts, but do not scope licenses.