Section 6.1. Console Scopes

6.1. Console Scopes

To open the MOM 2005 Operator console, your account must have membership in one of the management server local MOM security groups, such as MOM Users, MOM Administrators, or MOM Authors. This can be by virtue of membership in a domain security group that is itself a member of one (or more) of these local groups or by being explicitly named in the local security group. When you launch the Operator console, these permissions are checked; if your account doesn't have permission, the operation fails.

In addition, your account is also associated with a console scope. Console scopes are composed of computer groups. If a computer group is in your assigned scope, you will be able to see that group and all of its information and associated tasks in the Operator console. An account can be associated with only one console scope at a time. Figure 6-1 shows the default MOM Administrator Scope and some of the member computer groups.

Figure 6-1. The MOM Administrator Scope contains all computer groups

The Administrator, Operator, and User console scopes contain all the available computer groups by default. You can change this configuration by adding or removing computer groups or users in the Administrator console in the Administration node under Console Scopes, but it is not recommended. Many times the path followed to troubleshoot an alert will cross computer groups, so the responsible person will need to have access across all computer groups to do her job. Besides composing a console scope, the computer groups are also used as the last step in filtering for the data you want when working with the Operator console views.

At Leaky Faucet, remote office administrators have been delegated limited authority over their organizational unit and they can only view a limited set of operational MOM data, so it is appropriate to create additional console scopes for those users.