Managing Enterprise Manager Users

This category of user management refers to users who log in to Enterprise Manager to manage running Java CAPS applications.

For information about how to use a Lightweight Directory Access Protocol (LDAP) server to manage Enterprise Manager users, see Using LDAP with Java CAPS.

Enterprise Manager User Names and Roles

Enterprise Manager includes the following default users.

Table 1–5 Default Enterprise Manager Users

User Name	Default Password
admin	adminadmin
Administrator	STC

Roles enable you to organize users into groups. Each user name is associated with one or more predefined roles.

The following table describes the predefined roles for Enterprise Manager users. The default Enterprise Manager users have all of these roles. When you create a user, you can limit what the user can do by assigning only the appropriate roles.

Table 1–6 Predefined Roles (Enterprise Manager)

Role	Tasks Allowed
Deployment	Deploy and undeploy applications, manage servers, and monitor deployments.
User Management	Manage users of Enterprise Manager.
Read-Only Monitor	View information about Project components (not including Java Message Service components).
Controlling Monitor	Start, stop, and restart Project components (not including JMS components) and servers.
JMS Read-Only Monitor	View information about JMS components and messages.
JMS Read-Write Monitor	Create, edit, and delete JMS messages and destinations.
Manager	Manage the management applications and view application routing information.

Security Gateway Overview

Enterprise Manager relies on a security gateway for centralized authentication.

When a user tries to access Enterprise Manager, the gateway displays a login page. The user must enter a user name and password. If the user name and password are valid, then the home page of Enterprise Manager appears.

Enterprise Manager is composed of various management applications. All of the management applications rely on the security gateway for authentication. After a user is authenticated during the login procedure, the user can access each management application without needing to reenter the user name and password. This feature is called single sign-on.

When a user exits Enterprise Manager and then attempts to log in at a later time, the gateway once again displays the login screen.

Adding and Deleting Enterprise Manager Users

You can add and delete Enterprise Manager users. To perform these tasks, you must have the User Management role.

The following screen capture shows the Users List page.

In order for the JMS Read-Only Monitor and JMS Read-Write Monitor roles to function correctly, the Read-Only Monitor role must be checked. If you select either role without checking the Read-Only Monitor role, then Enterprise Manager automatically checks the Read-Only Monitor role.

To Add an Enterprise Manager User

1. In the Explorer panel of Enterprise Manager, click User Management.

   The Users List page appears.

2. Click Add New User.

   The Add/Edit User window appears.

3. In the User Name field, enter a name for the user.

   The user name is case sensitive.

4. In the Password field, enter a password for the user.

5. In the Confirm Password field, enter the password again.

6. (Optional) In the Description field, enter a description for the user.

7. Select one or more predefined roles.

8. Click Submit.

To Delete an Enterprise Manager User

1. In the Explorer panel of Enterprise Manager, click User Management.

   The Users List page appears.

2. In the Available Actions column, click Remove.

   ---

   Note –

   You cannot delete the admin user or the Administrator user.

   ---

Editing Enterprise Manager Users

You can edit Enterprise Manager users. For example, you can change the password of an existing user.

To perform this task, you must have the User Management role.

To Edit an Enterprise Manager User

1. In the Explorer panel of Enterprise Manager, click User Management.

   The Users List page appears.

2. In the Available Actions column, click Edit.

3. Make one or more changes.

4. Click Submit.

   If the user is currently logged in, then the changes become effective after the user logs out and logs in again.