After you create an IT GRC Process Management Pack user role based on the Compliance Program Manager or the Compliance Program Implementer user role profiles, you need to configure the object groups (scope) that can be managed by the newly created user role. You can configure the object groups using the Service Manager Console or by running the AddTypeToRoleScope.ps1 Windows PowerShell script. The AddTypeToRoleScope.ps1 Windows PowerShell script is located in the <service_manager_root>\IT GRC Process Management Pack folder (where service_manager_root is the root folder where you installed System Center Service Manager).

To configure the objects that can be managed by a user role using Windows PowerShell

  1. Log on to the computer running the Service Manager Console with an account that has the following permissions:

    • Member of the local Administrators group on the computer

    • Administrator in Service Manager

  2. Start Windows PowerShell. For guidance in doing so, see Starting Windows PowerShell.

  3. At a Windows PowerShell command prompt, type the following command, and then press Enter (where service_manager_root is the root folder where you installed System Center Service Manager and server_name is the name of the computer running System Center Service Manager).

      Copy Code 
    cd “<service_manager_root>\IT GRC Process Management Pack”

  4. At the Windows PowerShell command prompt, type the following command, and then press Enter (where user_role is the name of the user role you created).

      Copy Code 
    .\AddTypeToRoleScope.ps1 -server "server_name" -RoleName "<user_role>" -TypeToAdd "Software Updates"
    Note
    The preceding command should be entered on one line. Display limitations might cause it to display on more than one line.

  5. Repeat step 4 for each the following object types, substituting them for “Software Updates” in the command in step 4:

    • "Knowledge Article"

    • "Domain User or Group"

    • "Software Items"

    • "Incident"

    • "System.Compliance.ManagedEntityResultSource"

    • "Business Service"

    • “Computer”

    • “Printer”

    • “Problem”

    • “Change Request”

    • “Manual Activity”

    • “Review Activity”

  6. Exit the Windows PowerShell command prompt.

  7. Close all open windows and dialog boxes.

    Note
    If you make any changes to the Compliance User Roles using the Service Manager console, you will need to rerun the Windows PowerShell script because the console changes overwrite all changes made by the PowerShell script.