Roles in Enterprise Marketplace
Roles in Enterprise Marketplace
Roles in Enterprise Marketplace
Understand how the different roles in Enterprise Marketplace relate to the different types of users available in your organization.
Roles in Enterprise Marketplace provide different permissions to different types of users in your organization. This enables you, for example, to allow an employee to be able to provision catalogs but not be able to approve them.
User roles preferred practices
- Roles are assigned in Access Policies.
- Access Groups are created in Access Policies.
- Users are added to Access Groups which gives them the roles associated with those groups.
- You can define Access Tags to limit the scope of resources for Access Groups.
- If you do not have a scope defined by Access Tags, the Access Group will have access to all the resources.
Available user roles
The following are the personas, descriptions and roles that are available in Enterprise Marketplace:
Persona | Description | Roles |
|---|---|---|
App Developer | The dev transforms client needs into new enhancements or solutions for the application |
|
Development Manager | The Manager leads the application team and communicates the project status to stakeholders. |
|
IT Ops Manager | The manager oversees enterprise level automation and policy to maintain secure environments. |
|
IT Ops Director | The director establishes the strategy, workforce, resources, policies, and procedures. |
|
IT Architect • Enterprise Architect | An architect develops the IT strategy for infrastructure, platforms, and processes that will help internal or external business applications. |
|
Catalog Administrator | The administrator maintains the curated catalog and ensures availability to the consumers. |
|
Billing Analyst | A billing analyst manages all monthly cost reporting and works with Finance, Central IT, and other lines of business. |
|
Digital Services Architect
IT Architect Technical Approver | The digital services architect develops the catalog and ensures the availability to the consumers.
An IT architect develops the IT strategy for infrastructure, platforms, and processes that will help internal or external business applications |
|
Enterprise Marketplace roles privileges
Each of Enterprise Marketplace roles privileges are explained as follows:
Viewer role
The Viewer role allows visibility to all aspects of Enterprise Marketplace for any Access Group that the user belongs to. The Viewer role provides the following privileges:
- View all stacks irrespective of state for any Access Group that the user belongs to.
- View orders placed for any Access Groups that the user belongs to, and the list and details.
- View all catalogs by status (Published, Retired) for any Access Groups that the user belongs to.
- View all catalog personalization policies for any Access Groups that the user belongs to.
- View all approval and operational policies for any Access Groups that the user belongs to.
- View pricing information on the Quotes page.
- View the Consumption dashboard.
Service Designer role
The Service Designer role creates Service Offerings for the Catalog in Enterprise Marketplace. The activities that the Service Designer role can perform are described in the following pages:
Catalog Administrator role
The Catalog Admin role manages the providers and catalogs in the Enterprise Marketplace Catalog. The activities that the Catalog Admin role can perform are described in the following pages:
Buyer role
The Buyer role allows the user to select and request catalogs using the Catalog. The Buyer role provides the following privileges:
- View, configure, and place orders in the Enterprise Marketplace using quick purchase or shopping cart
- Create a shopping cart
- Add, edit, and remove items from a shopping cart
- View orders placed for that user and any Access Groups that user belongs to
- Perform actions for a specific order (edit order, cancel order, re-order, and so on)
- View stacks for that user and any Access Groups that user belongs to
- View alerts (all types) for that user and any Access Groups that the user belongs to
- Take action on alerts
- Perform actions on stacks (access, edit, cancel) for that user and any Access Groups that the user belongs to
- Raise a support ticket/incident
- Access help
- View all the users in the Access Group
- Perform operations on stack components for that user and any Access Groups that user belongs to.
Approver role
The main function of the approver is to evaluate and authorize the catalog request. An approver can accept or deny an order based on three expertise grounds: financial, legal, and technical. The functions of some of these roles can be easily automated by the service designer. For additional information, see Introduction to policies in Enterprise Marketplace.
The approver has the following privileges by default:
- View all orders based on the Access Group
- Approve or deny an order
- View all stacks procured, and alerts (all types) only for themselves
- Take action on alerts only for themselves
- Raise a support ticket/incident
- Access help
- View all the users in the Access Group
Types of Approvers
- Technical Approver: The Technical Approver role evaluates and approves the catalog request from the technical point of view. The technical approver must be the first evaluator of the catalog prior the rest.
- Legal Approver: The Legal Approver role evaluates and approves the catalog request from the legal point of view.
- Financial Approver: The Financial Approver role evaluates and approves the catalog request from the financial point of view.
For additional details on how to approve the catalog request, see Approval process. To analyze the active stacks when preparing for your financial evaluation, see Consumption Dashboard.
Administrative roles
The main function of the administrator is to manage the catalogs, orders, and policies. The administrator performs the following activities:
- Handle the providers, catalogs, and service categories
- View and publish/unpublish catalogs in Draft status
- Manage catalog visibility policies
- Delete broker and consumer pricing rules
- Control approval policies
- View all the orders in the system, irrespective of Access Group or Access Tag
The following are the types of administrators and the activities they can perform:
- Catalog Admin: The Catalog Admin role manages the providers and catalogs in the Enterprise Marketplace Catalog. The activities that the Catalog Admin role can perform are described in the following pages:
- Operator: The Operator role manages stacks for an Access Group. The activities that the Operator role can perform are described in the following pages:When adding an Access Group with an Operator role, ensure that the role is associated with the Access Group that the Buyer or Purchaser will select when placing orders.
- Order Administrator: The Order Administrator role is a system-wide role that monitors all orders in the system. Because this is a system-wide role, it is not associated with any specific business entities. The Order Administrator role has the privilege to view all the orders in the system, irrespective of Access Group or Access Tags.
- Order Integrator: The Order Integrator role is a system-wide role that can make stack names more consistent. Because this is a system-wide role, it is not associated with any specific business entities. The Order Integrator role has the privilege to update stack names between order placement and approval.
- Catalog Policy Admin: The Catalog Policy Admin role manages the policies that determine how catalog requests are approved. The Policy Admin role has the following privileges by default:
- View Policies menu items in the header, and the list of policies
- Add new approval policies
- View policy details
- Edit policy (enable/disable)
Managing user roles
Review, analyze, and learn how roles functions work in Kyndryl Modern Operations Applications.
User Roles provide your users with access to specific, role-based functions and privileges, allowing them to do their job within Kyndryl Modern Operations Applications. The following are the built-in User Roles in Kyndryl Modern Operations Applications:
Role | Description | Privileges |
|---|---|---|
Buyer | Set up and purchase orders for cloud services. |
|
Purchaser | Set up and purchase orders for cloud catalogs. |
|
Operator | Manage catalogs. |
|
Technical, Financial, and Legal Approvers | Users whose approval is needed before catalogs are provisioned. |
|
Catalog Admin | Responsible for managing catalog items. |
|
Team Setup Admin | Manage the users and roles within their organizations' Access Groups. |
|
Budget Admin | Manage budgets |
|
Catalog Policy Admin | Manage catalog policies |
|
System Admin | Configure the system initially before it is used |
|
Platform Operator | This role can create support incidents |
|
Order Integrator | This role can update stack names through an API at any point between order placement and approval | |
Team Managers and IT Ops Manager | This role is a business user who manages Access Groups. |
|
Do you have two minutes for a quick survey?
Take Survey
