24.1 Open Permission Sets

The Open implementation has no group-specific roles. This scenario has the following role types:

• Manager: responsible for all monitored assets, advisor configuration, group configuration, query analysis, event handling and communications. (Default role. Complete access.)

• DBA: responsible for monitored assets, query analysis, event investigation.

The following users are involved in this scenario:

• Manager: responsible for all monitored assets.

• DBA: responsible for monitoring MySQL instances, investigating issues and repairing those issues.

Manager Role

This section describes the Manager role definition for the Open implementation. Users in this role are power users. They are responsible for configuring everything. This role is permitted to perform the following actions:

• All possible actions .

Table 24.1 Manager Role Definition

Permission	Level
Server Group	Administer
MySQL Instances	Administer
Query Analysis Aggregate Data	Read-Only
Query Analysis Example and Explain Data	Read-Only
Web Application Login	Read-Only
MySQL Enterprise Monitor	Administer
Advisor Configuration	Administer
Event Blackout	Administer
Event Handling	Administer
New Group Creation	Administer
Settings	Administer
Users and Roles	Administer

The Manager users are responsible for configuring Advisor thresholds and defining the Event Handlers and Notification Groups. The Notification Groups contain the members of the standard DBA role, and the Senior DBA members.

This user has the permission to close Events, due to MySQL Instances being set to Administer.

DBA Role

This section describes the DBA role definition for the Open implementation. Users in this role are monitoring users. They are responsible for investigating events and resolving issues with the monitored MySQL instances. This role is permitted to perform the following actions:

• All tasks except User Management and editing MEM settings.

Table 24.2 DBA Role Definition

Permission	Level
Server Group	Administer
MySQL Instances	Administer
Query Analysis Aggregate Data	Read-Only
Query Analysis Example and Explain Data	Read-Only
Web Application Login	Read-Only
MySQL Enterprise Monitor	Read-Only
Advisor Configuration	Administer
Event Blackout	Administer
Event Handling	Administer
New Group Creation	Administer
Settings	None
Users and Roles	None

Note

It is possible, in this Open implementation, to add all DBA users to the default DBA role. However, for any size installation, it is recommended to have a well-defined hierarchy of users. Particularly for SMTP or SNMP notifications which can, if unmanaged, produce a very high volume of notification traffic. It is recommended to have a single group of senior users manage Advisor, Event Handler, and Notification Group configuration. All requests should go through those senior users.

Also, it is not possible to edit the default DBA role.

Role Membership

Users are assigned to roles in the following way:

• Manager Role

  • Teamlead/Coordinator user

• DBA Role

  • DBAs