Everyone sees and edits only what concerns them, and logs in with their own company credentials.
A CMDB is used by people with different roles: technicians, managers, administrative staff, external suppliers. CMDBuild lets you define precisely what each of them can see and do.
Who can do what
Permissions are assigned to user groups, and each user can belong to several groups. You can control:
Card types
For each type of card, such as servers, contracts or suppliers, you decide which user groups can view it and which can edit it.
Visible rows and columns
Even within the same type you can limit what people see: for example only the assets at their own site, or all cards but without the costs.
Processes
For each process, such as request or change management, you decide which groups can view it and which can start it.
Views, reports and dashboards
Views, saved search filters, reports and dashboards can also be made available only to the user groups that actually need them.
The same rules apply everywhere: web interface, Mobile App, Self-Service Portal and web services.
Log in with company credentials
Users can log in with the credentials they already use:
Password verification against LDAP or Microsoft Active Directory
Single Sign-On with CAS, SAML 2.0 (including ADFS) and OAuth2
Authentication delegated to an HTTP proxy (header authentication)
Alternatively, credentials managed directly in CMDBuild
Multitenancy
Several companies on the same system
Multitenant mode is designed for groups made up of several companies, or for organizations with autonomous sites and divisions.
Separate data
Each tenant works on its own part of the CMDB and cannot see the others' data, even though they share the same installation.
Tailored separation
Separation can be complete or partial, with some information shared by everyone, such as the list of suppliers.
Tenants from existing data
Tenants can match sites, companies or customers already recorded in the CMDB, or follow custom visibility rules.
Switch with one click
Users enabled for several tenants switch from one to another with a single click, without logging out and back in.
Learn more in the online documentation