|
|
ALSB supports various roles. The role assigned to a user determines the tasks that a user can perform. You can assign roles to users to secure resources and services in the ALSB Console by restricting access.
This section provides information about:
You can also restrict the user interfaces that should be made available to a given role depending on the privileges of the role.
By default, IntegrationAdmin, IntegrationDeployer, IntegrationMonitor, IntegrationOperator are predefined roles in ALSB. The following section describes the various roles available in ALSB and their functionality.
The IntegrationAdmin role is an administrative security role. As an IntegrationAdmin, you can access ALSB Console. Users assigned to this role can access all resources and services in ALSB. This role is granted to users requiring administrator privileges in ALSB Console.
In ALSB, you can assign the IntegrationAdmin role by assigning the IntegrationAdmins parent group when you create or reconfigure a user. For more information about creating a user in ALSB, see Adding a User in Using the AquaLogic Service Bus Console.
Users who are assigned this role can perform the following tasks in ALSB Console.
The IntegrationDeployer role is assigned to users who deploy services. An IntegrationDeployer can access ALSB Console to create and deploy resources and services. Also in this role, you can access the existing resources and services in the ALSB.
When a user is created or reconfigured in ALSB, IntegrationDeployer role is granted by assigning the IntegrationDeployers parent group. For more information about how to create a user in the ALSB, see Adding a User in Using the AquaLogic Service Bus Console.
Users who are assigned this role can perform all tasks that can be performed by a user in the IntegrationAdmin role. For more information about tasks performed by an user in the IntegrationAdmin role, see IntegrationAdmin.
The IntegrationMonitor role is granted to users who monitor resources and services in ALSB Console. Users assigned to this role can also monitor violations to Service Level Agreements (SLAs), and the alerts from the message flow pipeline.
When a user is created or reconfigured in ALSB Console, the IntegrationMonitor role is assigned to users by assigning the IntegrationMonitors parent group. For more information about how to create a user in ALSB Console, see
Adding a User in Using the AquaLogic Service Bus Console.
Users who are assigned this role can perform the following tasks:
The IntegrationOperator role is granted to users, who perform day-to-day operations in ALSB Console. IntegrationOperators can perform the day-to-day operations on the resources in ALSB Console. This role can also perform certain monitoring tasks and session management.
When a user is created or reconfigured in ALSB Console, the IntegrationOperator role is granted by assigning the IntegrationOperators parent group. For more information about how to create a user in ALSB Console, see
Adding a User in Using the AquaLogic Service Bus Console.
Users who are assigned this role can perform the following tasks:
For more information about tasks you can perform in each of these roles, see Role-Based Access: Configuring Administrative Security in AquaLogic Service Bus Security Guide.
Roles in ALSB Console are related to corresponding roles in WebLogic Server Administration Console. Table 2-1 gives different roles available in ALSB Console and the corresponding roles in WebLogic Server Administration Console.
Users belonging to the Administrator role in WebLogic Server are automatically included in the IntegrationAdmin group in ALSB Console. The converse however, is not true.
| Note: | A user can also be associated with multiple roles. For example, a user can be associated with IntegrationAdmin role in ALSB Console must posses the Administrator role in ALSB to access the WebLogic Server Administration Console. |
You can create new roles in ALSB if you possess Administrator role in the WebLogic Server Administration Console. An administrator can create new roles from the Global Roles page and customize the role by editing the conditions for the new role in the Global Role Conditions page. For more information about creating and customizing roles, see Adding Roles in Using the AquaLogic Service Bus Console.
|