Map Application User(s) to User Group

User Groups seeded with the OFS MMG Application Pack are listed in the Seeded User Groups table.

Note:

Run the following scripts manually for the user user-group mapping/unmapping in OFS AAI:

The following two flags must be added in the configuration table of the config schema:

MERGE INTO CONFIGURATION a USING (SELECT 1 FROM DUAL) b ON ( a.PARAMNAME= 'ENB_CSTM_GRP' ) WHEN NOT MATCHED THEN INSERT ( a.PARAMNAME, a.PARAMVALUE,a.DESCRIPTION) VALUES ('ENB_CSTM_GRP','true','Enable custom group creation during JIT')

/

MERGE INTO CONFIGURATION a USING (SELECT 1 FROM DUAL) b ON ( a.PARAMNAME= 'ENB_GRP_SYNC' ) WHEN NOT MATCHED THEN INSERT ( a.PARAMNAME, a.PARAMVALUE,a.DESCRIPTION) VALUES ('ENB_GRP_SYNC','true','Enable unmapping operation during JIT')

/

Two new flags are introduced in configuration table:
  • ENB_CSTM_GRP - If this flag is set as true, then custom groups can be created. If this flag is set as false, then the user will not be able to create custom groups and assign it to the user.
  • ENB_GRP_SYNC - If this flag is set as true, then the unmapping of users and groups are enabled. If this flag is set as false, then the user will not be able to unmap groups and users.

Based on these flags, unmapping of users with groups on user login is enabled.

Table 6-1 Seeded User Groups

User Group Name User Group Description
MDLREV

The Modeling Reviewer Group.

Users mapped to this group have access to the menu items in the OFS MMG Application that are related to model review activities.

MDLAPPR

The Modeling Approver Group.

Users mapped to this group have the rights to approve models created by the users.

MDLBATCHUSR The Modeling Batch User. Scheduler can use this Group for executing batches.
WKSPADMIN

The Workspace Administrator Group.

Users mapped to this group have access to all the menu items in the OFS MMG Application. Additionally, they have authorization rights to create and populate workspaces.

MDLUSR

The Modeling User Group.

Users mapped to this group have access to all the menu items in the OFS MMG Application that is related to model creation.

DSUSRGRP

General Role

Users mapped to this group have permission to access/modify MMG Studio Interpreter Configurations.

DSREDACTGRP Roles for applying redaction in graph. This group will be applicable to only those users for whom graph redaction is required.
OBJMIGADMIN Users mapped to this group have access to Object Migration links and UI to perform import or export of objects.
GRPADMIN The Graph Administrator Group.

Users mapped to this group have access to all the menu items in the OFS MMG Application related to graph and Pipeline/Refresh graphs related health services.

GRPUSR The Graph User Group.

Users mapped to this group have access to all the menu items in the OFS MMG Application related to graph and Pipeline/Refresh graphs related health services.

Note:

Admin link in the application home page is accessible only if the below seeded groups are mapped to the user:
  • IDNTYADMN
  • IDNTYAUTH