1. Fishbowl Solutions LinkSecurity Folder Access Control for Windchill Ross Jessen Rick Passolt

2. Mission
Deliver best in class solutions and services that exceed our customers expectations and deliver true value and a return on our customer’s investments.
Incorporated in 1999
Gold Level Software Member of PTC Partner Advantage
Customer Focused & Guaranteed Results!
Our mission is to exceed expectations, deliver ROI, earn a reference letter, and a partnership.

3. LinkSecurity
Problem
How do we retain the Folder Access Control functionality in PDMLink and Intralink 9.x that we were accustomed to with Intralink 3.x
Solution
Define additional Windchill Domains which are assigned to individual folders with Access Control Rules defined for Container-Specific Team Roles
Let’s see how this is accomplished…

4. Step 1: Create Team Roles that correspond to all the Folders for which access control is desired

5. Step 2: Create Domains that correspond to all the Folders for which access control is desired
Hierarchical structure must be mimicked to supply expected rights inheritance. For example: an individual who has rights to modify in the Interior folder would expect rights to modify in Dashboard folder as well. If Dashboard domain was not a child of Interior this would not happen.

6. Step 3: Create Access Rules in each Domain to grant rights to corresponding Team Role

7. Step 4: Assign Domain to corresponding Folder
Note: The preference: Security; Default Folder Domains; must be enabled to make this functionality available.

8. Putting it all together…
Domains
Teams
Folders
Rules

9. Challenges with manually assigned Folder Access Control
Time consuming – many steps are required to configure a single folder.
All Product and Library Managers need to be familiar with how to use the Policy Administrator – which is a fairly complex tool to learn.
There is nothing to help validate that all roles, folders, and access control rules are correctly configured – it is simply incumbent on the administrator to do it right.

10. Our Solution:
Automate it…

11. Fishbowl Solutions LinkSecurity
Access Control Rules are defined in “Sets” on the server, to insure they are applied consistently across your entire organization. It also makes application of any future refinements a simple task.

12. Fishbowl Solutions LinkSecurity
Folder Access Control is applied within a single simplified user interface – without ever going into the Policy Administrator tool...

13. Fishbowl Solutions LinkSecurity
Users and group are then assigned to the resulting folder specific roles using the familiar team tool.

14. LinkSecurity Live Demonstration14 14 14

15. LinkSecurity Product Feature Recap
LinkSecurity will automate the creation of domains and teams, folder assignment, and access control rule creation based on configurable rule sets in order to support folder access control.
The familiar Team tool is still utilized to assign users and groups to folders.
LinkSecurity insures that domains, teams, folders, and access control rules are correctly configured.
LinkSecurity also automates the removal of domains and teams in the event folder access control is no longer desired on a particular folder.
Since LinkSecurity simply automates OOTB functionality, maintenance and upgradability should not be a concern.

16. So how do I get my folder level access controls migrated from Intralink 3.x ???

17. Intralink 3.x Folder Access Control Migration Process
1. Export settings from Intralink 3.x using Fishbowl developed SQL scripts
2. Import and Refine Folder Access Control in Excel
3. Batch apply the refined settings using LinkSecurity command line mode

18. Q & A
and
Next Steps