アプリケーションの権限
このページでは、Splunk AppDynamics のアプリケーション権限の概要について説明します。アプリケーション権限は、最上位（デフォルト）から最下位（階層固有）の順にリストされた 3 レベルの継承モデルに従っています。
- デフォルト権限
- アプリケーション全体の権限
- ティア固有の権限
デフォルトでは、下位のレベルで権限をカスタマイズしていない限り、各レベルは 1 つ上のレベルから継承されます。このメカニズムにより、コントローラテナント UI で特定のビジネスアプリケーションに関してグループまたはユーザーにアクセス権を付与できます。
特定のレベルでカスタマイズされた権限は、別のレベルのより全般的な権限よりも優先されます。つまり、ティア固有の権限は、アプリケーション固有の権限よりも優先され、アプリケーション固有の権限はデフォルトの権限よりも優先されます。すべての権限を階層レベルでカスタマイズできるわけではありません。
テナント管理 UI の [Applications] タブからカスタムロールのアプリケーション権限を設定できます。Can Create Applications 権限をカスタムロールに割り当てることもできます。「対象カスタムロールの管理Splunk AppDynamics」を参照してください。
Create Default Permissions
All new applications inherit default permissions.
Configure Default Application Permissions
- Log in to the Tenant Administration UI.
- Navigate to Settings
> Administration and selectRoles.
- Add a new role or select a custom role.
- Click Can Create Applications to grant the role permission.
- Click Can Create Mobile Applications to create Mobile Real User Monitoring applications.
- Under Default Permissions, select the default permissions for this role:View, Edit, or Delete.
- To give all permissions to all applications, click Edit.
- To specify permissions for specific application configurations for all applications, deselectEdit, and then clickEdit (None).
- In the Edit Permissions panel, select specific permissions.
- Click Delete to grant permissions to delete any application. To grant permission to delete a specific application, customize the permission at the application level. See Application and Tier Level Permissions.
- Click OK then click Save.
アプリケーション権限のカスタマイズ
- [Permissions] ドロップダウンを [Custom] に設定します。
- View を選択し、次に Edit (None) を選択します。特定のアプリケーションを削除する権限を付与することもできます。
- [Add] をクリックして階層を追加するか、既存の階層を選択します。
- Edit を選択します。
- 特定の階層に対して個々の権限を選択します。
- [OK] をクリックし、次に [Save] をクリックします。
General Permissions
| Permission | Description of Activities | More Information |
|---|---|---|
| Can Create Applications | Create business, browser, and mobile applications. Also controls the Archive Snapshot action. | Business Applications |
| View, Edit, and Delete permissions for new applications can be set as part of the default permissions for a custom role |
View, edit, or delete business applications (and the tiers and nodes), browser, and mobile applications. Setting default delete permissions allows the user to delete all three artifacts from the application model. |
Application and Tier Permissions
You can grant the following permissions as specified. Permissions that you can customize at the tier level are indicated in the Description of Activities Enabled column. Asterisks (*) in the permissions table indicate permissions that are considered sensitive for security and data privacy purposes. Carefully consider the security and data privacy policies of your organization before granting these permissions.
| Permission | Description of Activities | More Information |
|---|---|---|
| Configure Transaction Detection* |
Create, edit, or delete transaction detection - can be at the tier level. | |
|
Configure Backend Detection |
Create, edit, or delete backends - can be at the tier level. | |
| Configure Error Detection |
Create, edit, or delete error detection. | Error Detection |
| Configure Diagnostic Data Collectors* |
Create, edit, or delete diagnostic data collectors. | Data Collectors |
| Configure Call Graph Settings |
| Call Graph Settings |
| Configure JMX |
Create, edit, or delete JMX metrics. | Configure JMX Metrics from MBeans |
| Configure Memory Monitoring |
Configure which custom classes are tracked by Object Instance Tracking. To activate or deactivate Object Instance Tracking, you need the Configure Agent Properties permission. 重要: To activate or deactivate Object Instance Tracking, you need the Configure Agent Properties permission.
| |
| Configure EUM (for Browser RUM) | ||
| Configure EUM (for Mobile RUM) | ||
| Configure Information Points* |
Create, edit, or delete information points. | |
| Configure Health Rules |
Create, edit, or delete health rules. | Configure Health Rules |
| Configure Actions |
Create, edit, or delete actions on agent properties UI. Create, edit, or delete email digests. | |
| Configure Policies |
Create, edit, or delete policies. | |
|
Configure Business Transactions
|
Organize Business Transactions including:
Configure Business Transaction thresholds. Configure snapshot settings. Set as a background task. Configure data collectors. Enable End User Monitoring. Enable analytics for business transactions. Activate or deactivate GUID injection. |
Organize Business Transactions Troubleshoot Business Transaction Performance with Transaction Snapshots |
| Configure Baselines |
Create, edit, or delete baselines. | |
| Configure SQL Bind Variables* |
Turn on or off capture raw SQL (also requires Configure Call Graph Settings). | |
| Configure Agent Properties |
Create, edit, or delete agent configuration (can be at the tier level). Activate or deactivate automatic leak detection (can be at the tier level). Activate or deactivate object instance tracking (can be at the tier level). Activate or deactivate custom memory structure (can be at the tier level). | |
| Agent Advanced Operation |
Reset the agent from the node dashboard. Request the agent thread dumps. Request the agent debug logs. | |
| Set JMX MBean Attributes and Invoke Operations |
Edit MBean attributes or invokes actions on operations. | |
| Configure Service Endpoints |
Create, edit, or delete service endpoints. | |
| Configure Monitoring Level (Production/Deployment) |
Switch between production and development mode. | |
| Configure 'My Dashboards' for Tiers and Nodes |
Create, edit or delete custom dashboards (can be at the tier level). | |
| Create Events | Create, edit, or delete events. | Events and Action Suppression API |
| Start Diagnostic Sessions |
Start a diagnostic session. | |
| View Sensitive Data* | In combination with the Configure Transaction Detection permission, enables the use of Live Preview and Business Transaction Discovery features to stream live data from your application. | Custom Match Rule Live Preview |