4 Managing Roles

This chapter introduces the concept of roles and explains how to create them.

This chapter includes the following topics:

• Understanding Roles

• Creating Roles

• Modifying Roles

4.1 Understanding Roles

Roles are a logical group of users with a specific set of permissions. You can create custom roles for users. You can add users to roles by group names defined in your domain. By adding groups of users to roles, you define the level of user access. You can also add individual users to a role.

The default roles included with Administrator include:

Table 4-1 Default Role Description

Role	Description
Administrator	Has access to all features. This role cannot be deleted. The permissions for the Administrators role are selected and grayed out, and they cannot be modified.
Report Architect	Has access to features for creating data objects and reports.
Report Creator	Has access to features for creating reports.
Report Viewer	Has access to features for viewing reports.

4.2 Creating Roles

To create a role:

1. Select Role management from the Administrator function list.

2. Click Create a new role.

   The role information page displays in the right frame.

3. Enter a Role Name and Description.

4. Select actions to include for this role by clicking the checkboxes of any of the following items:

   Create Data Object. Can create data objects in Architect.

   Active Viewer. Can use Active Viewer.

   Active Studio. Can use Active Studio.

   Architect. Can use Architect.

   Administrator. Can use Administrator.

   Create Report. Can create a report in Active Studio.

   Create Alert Rule. Can create an alert in Active Studio or Architect.

   Email Rendered Report. Can email a rendered (static) report page from Active Studio.

5. Select Add User or Add Group for adding a user or a group to the role.

6. Type a domain user or group name that you want to assign this role using the format DOMAIN\groupname.

7. Select Add User or Add Group if you want to add more than one user or group to the role. You can click Remove to delete a group field, but you cannot leave empty fields in the list.

8. Click Create.

4.3 Modifying Roles

You can modify any roles that you created and the default roles. You can change the permissions included in a role, and you can change the users or user groups assigned to a role.

To modify a role:

1. Select Role management from the list.

2. Select a role from the list.

   The role information displays in the right frame.

3. Make changes to the role such as changing the name, the permitted actions, and the users or groups included.

4. Click Save.

5. Restart the Oracle Business Activity Monitoring services to make the changes effective immediately.

   If you do not restart the Oracle Business Activity Monitoring services the changes to a role become effective 20 minutes after they are saved.