How to remove the dashboard tab for the users with "end user" role

Document ID : KB000014356
Last Modified Date : 26/02/2019
Show Technical Document Details
Introduction:

By design the "end user" role includes all the same access rights as the "catalog user".
In addition, the end user can subscribe to services, view invoices, view and add news messages, documents, and reports.
Therefore, the "End User" role can see more than the "Catalog User" role when they log in to Catalog.
For example, the users with the "End User" role login catalog UI, they can see more tabs than the users with "Catalog User" role.
But in some situations, the customer might want to remove the dashboard tab or invoices tab, etc for the users with "End User" role.
 

Question:

How to remove the dashboard tab  for the users with "End User" role?

Environment:
Windows.
EEM 12.x
Answer:

AA: Start and login to EEM:
1. From within the browser, start the EEM login 
2. For "application", select "Service Catalog"
3. Enter the eiamadmin userid and password to login
4. After you login, go to "Manage Access Policies"
5. Click on "Launchpad" in the left hand navaigation section
>> You'll see the way, the interface is built for a role.

BB: Find the correct ACL:
1. You scroll down and search/look for the ACL "ACL_113_Launchpads" (Full access for enduser).
>> At the right hand side, under 'Resources', you can see the options, granted to an enduser.
launchpad__applications_management 
launchpad__group-al-acctinfosubscriptionframe 
launchpad__invoicesEU 
launchpad__my_applicationsEU 
launchpad__my_dashboards 
launchpad__my_documents 
launchpad__my_messages 
launchpad__my_profile 
launchpad__my_reports 
launchpad__my_requestscategory 
launchpad__my_requestscatalog 
launchpad__my_subscriptions2 

Where "launchpad__my_dashboards" listed above is why the "End User" role can see the dashboard tab, when the users with "End User" role login to the Catalog UI.
If you want to remove the dashboard tab for "End User" role, you can simply remove launchpad__my_dashboards from ACL_113_Launchpads.

CC: Remove a resource from the ACL:
1. To remove a resource:
2. Open (click on) "ACL_113_Launchpads"
3. Scroll down to Access Policy Configuration, Resources:
4. In the showed list, select "launchpad__my_dashboards" and hit the trash-can(delete) icon
5. Save and Close the policy
6. Then recycle the EEM services and the Catalog service.

DD: Add a resource to the ACL:
1. Should you want to (re)add the resource:
2. Scroll down to Access Policy Configuration, Resources
3. Enter the text launchpad__my_dashboards in the "Add resource" field
4. Hit the "+" icon
5. Save and Close the policy
6. Then recycle the EEM services and the Catalog service.

Additional Information:

Note: when you modify Catalog application related "Manage Access Policies" information in EEM UI, you need to do it very carefully.
We suggest you, to take a snapshot of your EEM server or at least make a backup of your Catalog application's registration in EEM UI via the command "ant  backup-eem-app" on the EEM server, just in case.
The command needs to be executed from within the Catalog-Command-Prompt.