Map Application User(s) to User Group
User Groups seeded with the OFS MMG Application Pack are listed in the Seeded User Groups table.
Note:
Run the following scripts manually for the user user-group mapping/unmapping in OFS AAI:The following two flags must be added in the configuration table of the config schema:
MERGE INTO CONFIGURATION a USING (SELECT 1 FROM
DUAL) b ON ( a.PARAMNAME= 'ENB_CSTM_GRP' ) WHEN NOT MATCHED THEN INSERT (
a.PARAMNAME, a.PARAMVALUE,a.DESCRIPTION) VALUES
('ENB_CSTM_GRP','true','Enable custom group creation during
JIT')
/
MERGE INTO CONFIGURATION a
USING (SELECT 1 FROM DUAL) b ON ( a.PARAMNAME= 'ENB_GRP_SYNC' ) WHEN NOT
MATCHED THEN INSERT ( a.PARAMNAME, a.PARAMVALUE,a.DESCRIPTION) VALUES
('ENB_GRP_SYNC','true','Enable unmapping operation during
JIT')
/
- ENB_CSTM_GRP - If this flag is set as true, then custom groups can be created. If this flag is set as false, then the user will not be able to create custom groups and assign it to the user.
- ENB_GRP_SYNC - If this flag is set as true, then the unmapping of users and groups are enabled. If this flag is set as false, then the user will not be able to unmap groups and users.
Based on these flags, unmapping of users with groups on user login is enabled.
Table 6-1 Seeded User Groups
User Group Name | User Group Description |
---|---|
MDLREV |
The Modeling Reviewer Group. Users mapped to this group have access to the menu items in the OFS MMG Application that are related to model review activities. |
MDLAPPR |
The Modeling Approver Group. Users mapped to this group have the rights to approve models created by the users. |
MDLBATCHUSR | The Modeling Batch User. Scheduler can use this Group for executing batches. |
WKSPADMIN |
The Workspace Administrator Group. Users mapped to this group have access to all the menu items in the OFS MMG Application. Additionally, they have authorization rights to create and populate workspaces. |
MDLUSR |
The Modeling User Group. Users mapped to this group have access to all the menu items in the OFS MMG Application that is related to model creation. |
DSUSRGRP |
General Role Users mapped to this group have permission to access/modify MMG Studio Interpreter Configurations. |
DSREDACTGRP | Roles for applying redaction in graph. This group will be applicable to only those users for whom graph redaction is required. |
OBJMIGADMIN | Users mapped to this group have access to Object Migration links and UI to perform import or export of objects. |
GRPADMIN | The Graph Administrator Group.
Users mapped to this group have access to all the menu items in the OFS MMG Application related to graph and Pipeline/Refresh graphs related health services. |
GRPUSR | The Graph User Group.
Users mapped to this group have access to all the menu items in the OFS MMG Application related to graph and Pipeline/Refresh graphs related health services. |
Note:
Admin link in the application home page is accessible only if the below seeded groups are mapped to the user:- IDNTYADMN
- IDNTYAUTH