Fishbowl Solutions LinkSecurity Folder Access Control for Windchill Ross Jessen Rick Passolt

Mission Deliver best in class solutions and services that exceed our customers expectations and deliver true value and a return on our customer’s investments. Incorporated in 1999 Gold Level Software Member of PTC Partner Advantage Customer Focused & Guaranteed Results! Our mission is to exceed expectations, deliver ROI, earn a reference letter, and a partnership.

LinkSecurity Problem How do we retain the Folder Access Control functionality in PDMLink and Intralink 9.x that we were accustomed to with Intralink 3.x Solution Define additional Windchill Domains which are assigned to individual folders with Access Control Rules defined for Container-Specific Team Roles Let’s see how this is accomplished…

Step 1: Create Team Roles that correspond to all the Folders for which access control is desired

Step 2: Create Domains that correspond to all the Folders for which access control is desired Hierarchical structure must be mimicked to supply expected rights inheritance. For example: an individual who has rights to modify in the Interior folder would expect rights to modify in Dashboard folder as well. If Dashboard domain was not a child of Interior this would not happen.

Step 3: Create Access Rules in each Domain to grant rights to corresponding Team Role

Step 4: Assign Domain to corresponding Folder Note: The preference: Security; Default Folder Domains; must be enabled to make this functionality available.

Putting it all together… Domains Teams Folders Rules

Challenges with manually assigned Folder Access Control Time consuming – many steps are required to configure a single folder. All Product and Library Managers need to be familiar with how to use the Policy Administrator – which is a fairly complex tool to learn. There is nothing to help validate that all roles, folders, and access control rules are correctly configured – it is simply incumbent on the administrator to do it right.

Our Solution: Automate it…

Fishbowl Solutions LinkSecurity Access Control Rules are defined in “Sets” on the server, to insure they are applied consistently across your entire organization. It also makes application of any future refinements a simple task.

Fishbowl Solutions LinkSecurity Folder Access Control is applied within a single simplified user interface – without ever going into the Policy Administrator tool...

Fishbowl Solutions LinkSecurity Users and group are then assigned to the resulting folder specific roles using the familiar team tool.

LinkSecurity Live Demonstration 14 14 14

LinkSecurity Product Feature Recap LinkSecurity will automate the creation of domains and teams, folder assignment, and access control rule creation based on configurable rule sets in order to support folder access control. The familiar Team tool is still utilized to assign users and groups to folders. LinkSecurity insures that domains, teams, folders, and access control rules are correctly configured. LinkSecurity also automates the removal of domains and teams in the event folder access control is no longer desired on a particular folder. Since LinkSecurity simply automates OOTB functionality, maintenance and upgradability should not be a concern.

So how do I get my folder level access controls migrated from Intralink 3.x ???

Intralink 3.x Folder Access Control Migration Process 1. Export settings from Intralink 3.x using Fishbowl developed SQL scripts 2. Import and Refine Folder Access Control in Excel 3. Batch apply the refined settings using LinkSecurity command line mode

Q & A and Next Steps