====== Administrators' Guide ====== As previously stated, TeemIp has been built on top of [[https://www.itophub.io/|iTop]] framework, the world famous open source ITSM and CMDB solution. As a consequence, administring TeemIp is very similar to administring iTop and TeemIp's administrator manual extensively refers to [[https://wiki.openitop.org/doku.php?id=LATEST:admin:start|iTop's administrator manual]]. ===== User profiles ===== Next to the standard user profiles already embedded within iTop, TeemIp brings its own set of profiles: ^ Profile ^ Description ^ Extension ^ | Admin Tools Manager | Has the rights to the Administration menu. Must be combined with another profile | [[https://www.itophub.io/wiki/page?id=extensions:itop-admin-delegation-profiles|Admin tools delegation]] | | Audit Manager | Has the rights to create and modify Audit rules. Must be combined with another profile | [[https://www.itophub.io/wiki/page?id=extensions:itop-admin-delegation-profiles|Admin tools delegation]] | | CMDB Guest | Person with read only rights (no bulk read allowed) on CMDB objects (only) | [[extensions:teemip-core-ip-mgmt|IPAM for iTop]] | | DHCP Manager | Person handling the DHCP space | [[extensions:teemip-dhcp-mgmt|DHCP Management]] | | Hostmaster | Person handling the IP space and looking after the IP changes | [[extensions:teemip-core-ip-mgmt|IPAM for iTop]] | | Hostmaster - DNS | Person handling the DNS space | [[extensions:teemip-zone-mgmt|DNS Zone Management]] | | IP Helpdesk agent | Person processing the IP requests | [[extensions:teemip-request-mgmt|IP Request Management]] | | IP Portal Automation user | Is elligible to have its IP requests automatically processed. Must be used in conjunction with "IP Portal user" profile. | [[extensions:teemip-request-mgmt|IP Request Management]] | | IP Portal user | Has the rights to access the IP portal. People having this profile will not be allowed to access the standard application, they will be automatically redirected to the default portal | [[extensions:teemip-request-mgmt|IP Request Management]] | | Network Security Manager | Person in charge of network security. Must be used in conjunction with "Configuration Manager" profile. | [[extensions:teemip-network-mgmt-extended|Network Management Extended]] | | Notification Manager | Has the rights to create and modify notification triggers and actions. Must be combined with another profile | [[https://www.itophub.io/wiki/page?id=extensions:itop-admin-delegation-profiles|Admin tools delegation]] | | Query History | Has all rights but query the history (CMDBChange) | [[https://www.itophub.io/wiki/page?id=extensions:itop-admin-delegation-profiles|Admin tools delegation]] | | Query Manager | Has the rights to create and modify the Query Phrasebook. Must be combined with another profile | [[https://www.itophub.io/wiki/page?id=extensions:itop-admin-delegation-profiles|Admin tools delegation]] | | SynchroData Manager | Has the rights to create and modify Synchro data sources | [[https://www.itophub.io/wiki/page?id=extensions:itop-admin-delegation-profiles|Admin tools delegation]] | | User Manager | Has the rights to create and modify users. Must be combined with another profile | [[https://www.itophub.io/wiki/page?id=extensions:itop-admin-delegation-profiles|Admin tools delegation]] | And of course, TeemIp alters some of the iTop profiles to grant them access to the specific TeemIp objects: ^ Profile ^ Change ^ | Configuration Manager | Adds R/W rights on TeemIp network objects, IP addresses and links with IP Objects | | Document author | Adds R/W rights on links with IP Objects | Standard user profiles left unchanged : ^ Profile ^ Change ^ | Administrator | Has the rights on everything (bypassing any control) | | Portal power user | Users having this profile will have the rights to see all the tickets for a customer in the portal. Must be used in conjunction with other profiles (e.g. Portal User). | | REST Services User | Only users having this profile are allowed to use the REST Web Services (unless 'secure_rest_services' is set to false in the configuration file). | ===== TeemIp Newsroom ===== Important news related to the TeemIp project are provided to TeemIp administrators through the TeemIp newsroom. This communication channel comes in addition to the one provided by iTop (described [[https://www.itophub.io/wiki/page?id=latest%3Aadmin%3Anewsroom|here]]). When logged as an administrator, the "news" icon will tell you if they are any new messages still unread. {{ :2_x:newsroom1-3x.png }} Clicking on the icon will list these messages. Optionally, links will allow you to read all messages already sent by iTop or TeemIp in specific pages. {{ :2_x:newsroom2-3x.png }} You may deactivate TeemIp newsroom through the General Configuration file. In the module section, just adds the following lines (if not already present) ans set the 'enabled' parameter to false. 'teemip-newsroom-provider' => array ( 'enabled' => false, ), ===== iTop Extensions embedded in TeemIp standalone ===== Next to [[extensions:start|TeemIp extensions]], TeemIp standalone is build with a few extensions coming from the iTop world. These are: * [[https://www.itophub.io/wiki/page?id=extensions:itop-admin-delegation-profiles|Admin tools delegation]] by Combodo * [[https://store.itophub.io/en_US/products/molkobain-datacenter-view| Datacenter view]] by Molkobain * [[https://www.itophub.io/wiki/page?id=extensions%3Aemail_reply | Send updates by email]] by Combodo * [[https://www.itophub.io/wiki/page?id=extensions%3Aitop-object-copier | User actions configurator]] by Combodo * [[https://github.com/Combodo/combodo-webhook-integration |WEB Hook integration]] by Combodo * [[https://www.itophub.io/wiki/page?id=extensions:itop-synchro-dashboard | Data synchronization dashboard]] by Combodo * [[https://www.itophub.io/wiki/page?id=extensions:combodo-workflow-graphical-view | Workflow graphical view]] by Combodo ===== Links to iTop's admin features ===== The following list provides direct links to the admin chapters described in the iTop's admin pages. * [[https://www.itophub.io/wiki/page?id=2_7_0%3Ainstall%3Astart|Install / Upgrade iTop]] * [[https://www.itophub.io/wiki/page?id=2_7_0%3Aadvancedtopics%3Astart|Integrate iTop]] * [[https://www.itophub.io/wiki/page?id=2_7_0%3Acustomization%3Astart|Customize iTop]] * [[https://wiki.openitop.org/doku.php?id=LATEST:admin:using_itop|Using iTop]] ==== iTop admnistrator's guide ==== * [[https://wiki.openitop.org/doku.php?id=LATEST:admin:itop_configuration_file|Configuration Parameters]] * [[https://www.itophub.io/wiki/page?id=2_7_0%3Aadmin%3Aplaceholders|Notification placeholders]] * [[https://www.itophub.io/wiki/page?id=2_7_0%3Aoql%3Astart|Object Query Langage]] * [[https://www.itophub.io/wiki/page?id=2_7_0%3Aadmin%3Arich_text_limitations|HTML formatting limitations]] ==== Administration Menu ==== * [[https://wiki.openitop.org/doku.php?id=LATEST:admin:managing_user_accounts|User Accounts & Profiles]] * [[https://wiki.openitop.org/doku.php?id=LATEST:admin:audit|Auditing the CMDB]] * [[https://wiki.openitop.org/doku.php?id=LATEST:admin:objects_queries|Run Objects Queries]] * [[https://wiki.openitop.org/doku.php?id=LATEST:admin:phrasebook|Query Phrasebook]] * [[https://wiki.openitop.org/doku.php?id=LATEST:advancedtopics:exportdata|Export]] * [[https://wiki.openitop.org/doku.php?id=LATEST:admin:browsing_the_data_model|Browsing the Data Model]] ==== Configuration Menu ==== * [[https://wiki.openitop.org/doku.php?id=LATEST:admin:configuration_editor|General Configuration]] * [[2_x:datamodel:ip-settings|Global IP Settings]] * [[https://wiki.openitop.org/doku.php?id=LATEST:advancedtopics:data_synchronization|Synchronize Data Sources]] * [[https://wiki.openitop.org/doku.php?id=LATEST:admin:notifications|Notifications]] ==== System Menu ==== * [[https://www.itophub.io/wiki/page?id=2_7_0%3Aadmin%3Adatabase-tools|Database integrity]] * [[https://wiki.openitop.org/doku.php?id=LATEST:admin:backup|Data Backup]] * [[https://www.itophub.io/wiki/page?id=2_7_0%3Aadmin%3Acore-update|Application upgrade]] ==== Tips for administrators ==== * [[https://www.itophub.io/wiki/page?id=2_7_0%3Aadmin%3Anewsroom|iTop Newsroom]] * [[https://wiki.openitop.org/doku.php?id=LATEST:customization:delegate_rights|Delegate Admin tools]] * [[https://wiki.openitop.org/doku.php?id=LATEST:admin:settings|Set iTop in read-only]] * [[https://wiki.openitop.org/doku.php?id=LATEST:admin:locking|Prevent concurrent modifications]] * [[https://wiki.openitop.org/doku.php?id=LATEST:admin:cron|Schedule background tasks]] * [[https://wiki.openitop.org/doku.php?id=LATEST:admin:performance|Tune iTop Performance]] * [[https://www.itophub.io/wiki/page?id=2_7_0%3Aadmin%3Asecurity|Security best practices]] * [[https://www.itophub.io/wiki/page?id=2_7_0%3Aadmin%3Argpd|Managing Personal data in iTop]]