<style>p { margin: 0; }span.fr-emoticon.fr-emoticon-img { background-repeat: no-repeat !important; font-size: inherit; height: 1em; width: 1em; min-height: 20px; min-width: 20px; display: inline-block; margin: -0.1em 0.1em 0.1em; line-height: 1; vertical-align: middle; } span.fr-emoticon { font-weight: normal; font-family: "Apple Color Emoji", "Segoe UI Emoji", "NotoColorEmoji", "Segoe UI Symbol", "Android Emoji", "EmojiSymbols"; display: inline; line-height: 0; } blockquote { border-left: solid 2px #5e35b1; color: #5e35b1; margin-left:0; padding-left:5px;}blockquote blockquote{ border-color: #00bcd4; color: #00bcd4;}blockquote blockquote blockquote{ border-color: #43a047; color: #43a047;} table.grid{ border-collapse: collapse;} table.grid td, table.grid th { border: 1px solid #ddd;} .fr-fic.fr-dib{ display: block; margin: 5px auto;}.fr-fic.fr-dib.fr-fir{ text-align: right; margin: 5px 0 5px auto;}.fr-fic.fr-dib.fr-fil{ text-align: left; margin: 5px auto 5px 0;}.fr-fic.fr-dii{ float: none; margin: 5px auto;}.fr-fic.fr-dii.fr-fil{ float: left; margin: 5px auto;}.fr-fic.fr-dii.fr-fir{ float: right; margin: 5px auto;}img.fr-dib.fr-fir { margin-right: 0; text-align: right;}img.fr-dib.fr-fil { margin-left: 0; text-align: left;}img.fr-dib { margin: 5px auto; display: block; float: none;}img.fr-bordered { box-sizing: content-box; border: solid 5px #CCC;}img.fr-shadow { box-shadow: 10px 10px 5px 0px #cccccc;}img.fr-rounded { border-radius: 10px; -moz-border-radius: 10px; -webkit-border-radius: 10px; -moz-background-clip: padding; -webkit-background-clip: padding-box; background-clip: padding-box;}</style><p><strong>In this guide we will cover:</strong></p><p><strong>- How to restrict agent access to assets</strong></p><p><strong>- How to restrict agents access to certain asset fields</strong></p><p><br></p><p>The type of asset permissions you use will depend on the setting 'Asset Permission Type', found in Configuration > Asset Management > General Settings.</p><p> </p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImY5MGEyOWMxLWI3ZDktNDM5ZC05MzEyLTkxODJmMzBkOTg1NiJ9.2y1RxczYBsd7LNMzFhWqnJULsfFUupC7V6ms-3iNEe0" class="fr-fic fr-fil fr-dib" width="1045" style="width: 1047px; height: 361.401px;" height="361"></p><p><strong><span style="font-size: 10pt;">Fig 1. Asset Permission type</span></strong></p><p><br></p><p><strong>Use Read/Write permissions for Asset Types and Assets</strong> - When selected asset access will be determined by agent permissions against the agent's profile/role. </p><p><strong>Use access control for Asset Groups, Asset type and Asset access is implied from their group</strong> - When enabled agent access to assets will be determined by access control set against the asset group. If an agent has been given access to an asset group, this access will apply to all assets in that group regardless of asset type. Using this permission type will mean agents cannot create assets of types they do not have at least "Read Only" access control to.</p><p><strong>Use access control for Asset Groups and asset types. Group access is required to see the group in lists. Asset access is implied from its type</strong>. - When enabled access control can be set for each asset group and each type within that group. In order to access an asset type the agent must have access to the group it is in. If the agent has been given access to the asset type but not the group, they will not be able to access the assets. </p><p><br></p><p><strong><em>Note: If using access control to restrict access, agents who do not have "Owner" level access to the asset group/type will not be able to "Clone" assets. This is regardless of having permission to create/edit assets.</em></strong></p><p><br></p><p><strong><span style="font-size: 14pt;">How to restrict agent access to assets </span></strong></p><p><strong><span style="font-size: 12pt;">Using Read/Write Permissions</span></strong></p><p>First ensure Asset Permission type is set to Use Read/Write permissions for Asset Types and Assets.</p><p><br></p><p>Under configuration > teams and agents > agents (or roles) > select an agent (or role)> "Permissions" tab, here you can set the permissions the agent has. The permissions "Assets Access Level" will determine their access, this will apply to all assets. </p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImI4ZWFhZmUyLTgwMDQtNGQ0Yy05NzMzLTU4ZmZkOGQ2ZjZiMiJ9.CMJ9JaevETqe621c1YGK83ZACMSa7dUgjMKNWhuGJ6c" class="fr-fic fr-fil fr-dib" width="498" style="width: 500px; height: 291.878px;" height="292"></p><p><strong><span style="font-size: 10pt;">Fig 2. Assets access level </span></strong></p><p><br></p><p>To restrict which asset types they have access to set the permission 'Allow use of all Asset Types' to no, then add the asset types you would like them to have access to in the table. </p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjA1ZWNmYjBmLTI4N2UtNGE1Yi05YzFiLTQ0OGQwNWM3OTA5MSJ9.xB-TykUjDxf0pGmZ4jNaK3Sl3mMcRcqWtT8xUSKit6U" class="fr-fic fr-fil fr-dib" width="1233" style="width: 1235px; height: 523.807px;" height="524"></p><p><strong><span style="font-size: 10pt;">Fig 3. Asset type restrictions</span></strong></p><p><br></p><p><strong><span style="font-size: 14pt;">Using access control for Asset Groups</span></strong></p><p>First, set <span style="color: rgb(0, 0, 0); font-family: sans-serif; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;" id="isPasted">Asset Permission type to Use access control for Asset Groups, Asset type and Asset access is implied from their group.</span></p><p><br></p><p><span id="isPasted">Now head to Configuration > Asset Management > Asset Groups, select a group. Now in the top left you will have the "Access Control" button. Use this to set which agents can access this asset and what level of access they have. </span></p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImExYzQ2YjVmLWFkNDgtNGIzNi1iMzUyLWQ0NWExNWU2ODA5OSJ9.TYhVaAFRcXz8dhy8L1_0LyYC4UP0uOoLqtN-0WD2I90" class="fr-fic fr-fil fr-dib" width="576" style="width: 578px; height: 330.85px;" height="331"></p><p><strong><span style="font-size: 10pt;">Fig 4. Setting access control</span></strong></p><p><br></p><p>You will need to set this against each of the groups. </p><p><br></p><p><strong><span style="font-size: 12pt;">Using access control for Asset Groups and asset types</span></strong></p><p id="isPasted">First, set '<span style="color: rgb(0, 0, 0); font-family: sans-serif; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;">Asset Permission' type to 'Use access control for Asset Groups and asset types. Group access is required to see the group in lists. Asset access is implied from its type'.</span></p><p><br></p><p id="isPasted">Now set the access control for each group you would like agents to have access to. If you would like them to have access to some, but not all asset types in this group you will need to give them access to the group the type is in. </p><p><br></p><p>Now set access for the asset type. Head to configuration > asset management > asset types > select a type, in the top left you will have the 'access control' button, use this to set which agents can access this asset and what level of access they have. </p><p><br></p><p><strong><span style="font-size: 14pt;">Restrict access to certain asset fields</span></strong></p><p>Regardless of which asset permission type you are using, asset fields are restricted against the agent profile or role. </p><p><br></p><p>Head to Configuration > Teams and Agents > Roles > select a role > "Permissions" tab, look for 'asset field restrictions'. Set "Allow use of all asset fields" to "No", then add in the fields the agents in this role have access to. This allows you to still give agents access to see assts but restrict particular sensitive information. </p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImQ1NWRjNzcwLTBlMWQtNGZkNi04OGE2LTFiYjM4Nzk4ZjA3MCJ9.6RwC2tE3ZbVWiRR8hZN4o7Jizfr7x0y7lG5WKp_eBnY" class="fr-fic fr-fil fr-dib" width="1226" style="width: 1228px; height: 446.631px;" height="447"></p><p><strong><span style="font-size: 10pt;">Fig 5. Asset field restrictions against agent/role</span></strong></p><p><br></p><p><strong><span style="font-size: 12pt;">Restrict Access to certain Asset system fields</span></strong></p><p>The above method will allow you to restrict an agent's ability to view/modify asset fields but will not allow you to restrict asset system fields. </p><p><br></p><p>Asset system fields include fields such as asset type, site, status, asset number, criticality etc. </p><p><br></p><p>Access to these fields are set per asset type. To restrict this head to configuration > asset management > asset types > select an asset type > layout tab, here you will see a section called 'System field visibility'. To restrict who can edit an asset system field add the field to this table and select which agent roles can edit this field. In figure 6 only agents with the Administrator role can edit the asset number field for assets under the Application server asset type. </p><p><br></p><p><img src="https://halo.haloservicedesk.com/api/attachment/image?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6ImQ4MThiMjMwLThmZTgtNDdjNC04ODYzLWQ0Zjc2Y2E1MjQ5OSJ9.fRt0mUjV5X0Tkr1uGssUsk7K3El3YRFBHoGphfYEf_I" class="fr-fic fr-fil fr-dib" width="1228" style="width: 1230px; height: 524.425px;" height="524"></p><p><strong><span style="font-size: 10pt;">Fig 6. Asset system field visibility restrictions</span></strong></p><p><br></p><p>If a field is not in the table any agent with permission to edit the asset will be able to edit the field. You will need to add in restrictions for each field and against each asset type you would like the restriction to apply to. </p><p><br></p><p><br></p><p><br></p><p><br></p><p><br></p>
