3 User Roles and Privileges
A function code or function name is a basic unit. Each function name can be assigned to a role. Each role can then be assigned to a group. And, then a group is assigned to a user.
After installing STSA, a set of predefined user groups are created. These user groups can be assigned to application users where each user can be assigned certain roles and responsibilities.
Table 3-1 List of predefined user groups
| Group Name | Description |
|---|---|
| IDNTYAUTH | Identity Authorizer group |
| MDLUSR | Modeling User Group |
| MDLREV | Modeling Reviewer Group |
| MDLAPPR | Modeling Approver Group |
| PMFADMIN | Object migration admin group |
| WKSPADMIN | Workspace Administrator Group |
| DSUSRGRP | Datastudio User Group |
| SIMULATIONUSR | Simulation User Group |
| AYCFGADMIN AY_CFG | admin group |
| PORTFOLIOADMIN | Portfolio admin group |
| PROJECTADMIN | Project admin group |
| SCENARIOADMIN | Scenario admin group |
| METRICSADMIN | Metrics admin group |
| PROCESSADMIN | Process admin group |
| VARIABLEADMIN | VARIABLE admin group |
| CONFIGADMIN | Config admin group |
An application user is mapped to a user group and a user group is mapped to the following roles and internally user roles are mapped to role functions such as view, create, modify approval and so on.
Ensure that you map the application user to one or more of the following user roles.
The basic roles defined in STSA are:- Regulatory Role - You can create a project with Regulatory role and configurations that are approved.
- Project Manager Role - A project manager in STSA creates or edits and manages a repository of projects.
- Analysis Configuration Manager Role - A Project Configuration Manager in STSA creates or edits or manages all configurations in all the projects.
- Variable Manager Role - Manages all the variables.
- Metric Manager Role - Manages all the metrics defined in STSA or projects.
- Scenario Manager Role - Manages all the scenarios defined in STSA or projects.
- Portfolio Manager Role - Manages all the portfolios and asses them as part of stress testing in STSA.
Table 3-2 List of features and their roles and functions
| Feature Name | Role | Function Code | Function Code Description |
|---|---|---|---|
| Metadata Browser | MDB Access | MDBACCESS | The user mapped to this function can access metadata browser. |
| MDB Read-only | MDBREAD | The user mapped to this function can view metadata browser. | |
| MDB Write | MDBWRITE | The user mapped to this function can create metadata browser. | |
| Publish Metadata | METADMIN | The user mapped to this function can publish the metadata browser. | |
| Object Migration | Obj Migration Access | MIGACC | Object Migration Role |
| Obj Migration Advanced | MIGADVND | Object Migration Advanced Role | |
| Obj Migration Authorize | MIGAUTH | Object Migration Authorize Role | |
| Obj Migration Phantom | MIGPHTM | Object Migration Phantom Role | |
| Obj Migration Read | MIGREAD | The user mapped to this function can view the migrated objects. | |
| Obj Migration Write | MIGWRITE | Object Migration Write Role | |
| ObjectAdmin advanced | OBJADMADV | ObjectAdmin advanced access | |
| Migration Export Advanced | Migration Export Advanced | OMEXADVND | Migration Export Advanced Role |
| Migration Export Phantom | OMEXPHTM | Migration Export Phantom Role | |
| Migration Export Read | OMEXREAD | Migration Export Read-only Role | |
| Migration Export Write | OMEXWRITE | Migration Export Write Role | |
| Migration Import Advanced | OMIMADVND | Migration Import Advanced Role | |
| Migration Import Phantom | OMIMPHTM | Migration Import Phantom Role | |
| Migration Import Read | OMIMREAD | Migration Import Read-only Role | |
| Migration Import Write | OMIMWRITE | Migration Import Write Role | |
| Configuration Manager | CONFIG_READ | EST_CONFIG_VIEW | The user mapped to this function can view the configuration manager. |
| EST_CONFIG_SUMM | The user mapped to this function can create configuration manager summary. | ||
| CONFIG_WRITE | EST_CONFIG_VIEW | The user mapped to this function can view configuration manager. | |
| EST_CONFIG_SUMM | The user mapped to this function can view configuration manager summary. | ||
| EST_CONFIG_MOD | The user mapped to this function can modify configuration manager. | ||
| Portfolio | PORTFOLIO_READ | EST_PORTFOLIO_VIEW | The user mapped to this function can view portfolio. |
| EST_PORTFOLIO_SUMM | The user mapped to this function can view portfolio summary. | ||
| PORTFOLIO_WRITE | EST_PORTFOLIO_VIEW | The user mapped to this function can view portfolio. | |
| EST_PORTFOLIO_SUMM | The user mapped to this function can view portfolio summary. | ||
| EST_PORTFOLIO_ADD | The user mapped to this function can create portfolios. | ||
| EST_PORTFOLIO_MOD | The user mapped to this function can modify portfolios. | ||
| EST_PORTFOLIO_COPY | The user mapped to this function can replicate portfolios. | ||
| EST_PORTFOLIO_DEL | The user mapped to this function can delete portfolios. | ||
| Metrics | METRICS_READ | EST_METRICS_VIEW | The user mapped to this function can view metrics. |
| EST_METRICS_SUMM | The user mapped to this function can view metrics summary. | ||
| METRICS_WRITE | EST_METRICS_VIEW | The user mapped to this function can view metrics. | |
| EST_METRICS_SUMM | The user mapped to this function can view metrics summary. | ||
| EST_METRICS_ADD | The user mapped to this function can add metrics. | ||
| EST_METRICS_MOD | The user mapped to this function can modify metrics. | ||
| EST_METRICS_COPY | The user mapped to this function can replicate metrics. | ||
| EST_METRICS_DEL | The user mapped to this function can delete metrics. | ||
| METRICS_WF | EST_METRICS_CMT | The user mapped to this function can provide their comments for metrics. | |
| EST_METRICS_REV | The user mapped to this function can review metrics. | ||
| EST_METRICS_AUTH | The user mapped to this function can approve metrics. | ||
| Variable | VARIABLE_READ | EST_VARIABLE_VIEW | The user mapped to this function can view variable. |
| EST_VARIABLE_SUMM | The user mapped to this function can view variable summary. | ||
| VARIABLE_WRITE | EST_VARIABLE_VIEW | The user mapped to this function can view variable. | |
| EST_VARIABLE_SUMM | The user mapped to this function can view variable summary. | ||
| EST_VARIABLE_ADD | The user mapped to this function can create variable. | ||
| EST_VARIABLE_MOD | The user mapped to this function can modify variable. | ||
| EST_VARIABLE_COPY | The user mapped to this function can replicate variable. | ||
| EST_VARIABLE_DEL | The user mapped to this function can delete variable. | ||
| VARIABLE_WF | EST_VARIABLE_CMT | The user mapped to this function can provide their comments for variable. | |
| EST_VARIABLE_REV | The user mapped to this function can review variable. | ||
| EST_VARIABLE_AUTH | The user mapped to this function can approve variable. | ||
| Model | MDLREAD | MDLVIEW | The user mapped to this function can view models. |
| MDLACCESS | MDLSUMM | The user mapped to this function can view model summary. | |
| MDLWRITE | MDLVIEW | The user mapped to this function can view models. | |
| MDLSUMM | The user mapped to this function can view model summary. | ||
| MDLADD | The user mapped to this function can create models. | ||
| MDLEDIT | The user mapped to this function can modify models. | ||
| MDLCOPY | The user mapped to this function can replicate models. | ||
| MDLDEL | The user mapped to this function can delete models. | ||
| Process | PROCESS_READ | EST_PROCESS_VIEW | The user mapped to this function can view processes. |
| EST_PROCESS_SUMM | The user mapped to this function can view process summary. | ||
| PROCESS_WRITE | EST_PROCESS_ADD | The user mapped to this function can create processes. | |
| EST_PROCESS_MOD | The user mapped to this function can modify processes. | ||
| EST_PROCESS_COPY | The user mapped to this function can replicate processes. | ||
| EST_PROCESS_DEL | The user mapped to this function can delete processes. | ||
| Scenario | SCENARIO_READ | EST_SCENARIO_VIEW | The user mapped to this function can view scenarios. |
| EST_SCENARIO_SUMM | The user mapped to this function can view scenario summary. | ||
| SCENARIO_WRITE | EST_SCENARIO_VIEW | The user mapped to this function can view scenario. | |
| EST_SCENARIO_SUMM | The user mapped to this function can view scenario summary. | ||
| EST_SCENARIO_ADD | The user mapped to this function can add scenario. | ||
| EST_SCENARIO_MOD | The user mapped to this function can modify scenario. | ||
| EST_SCENARIO_COPY | The user mapped to this function can replicate scenario. | ||
| EST_SCENARIO_DEL | The user mapped to this function can delete scenario. | ||
| SCENARIO_WF | EST_SCENARIO_CMT | The user mapped to this function can provide their comments on scenario. | |
| EST_SCENARIO_REV | The user mapped to this function can review scenario. | ||
| EST_SCENARIO_AUTH | The user mapped to this function can approve scenario. | ||
| Analysis Configuration | AY_CFG_READ | EST_AY_CFG_VIEW | The user mapped to this function can view analysis configuration. |
| EST_AY_CFG_SUMM | The user mapped to this function can view analysis configuration summary. | ||
| AY_CFG_WRITE | EST_AY_CFG_VIEW | The user mapped to this function can create analysis configuration. | |
| EST_AY_CFG_SUMM | The user mapped to this function can view analysis configuration summary. | ||
| EST_AY_CFG_ADD | The user mapped to this function can add analysis configuration. | ||
| EST_AY_CFG_MOD | The user mapped to this function can modify analysis configuration. | ||
| EST_AY_CFG_COPY | The user mapped to this function can replicate analysis configuration. | ||
| EST_AY_CFG_DEL | The user mapped to this function can delete analysis configuration. | ||
| AY_CFG_WF | EST_AY_CFG_CMT | The user mapped to this function can provide their comments on analysis configuration. | |
| EST_AY_CFG_REV | The user mapped to this function can review analysis configuration. | ||
| EST_AY_CFG_AUTH | The user mapped to this function can approve analysis configuration. | ||
| Project | PROJECT_READ | EST_PROJECT_VIEW | The user mapped to this function can view project. |
| EST_PROJECT_SUMM | The user mapped to this function can view project summary. | ||
| PROJECT_WRITE | EST_PROJECT_VIEW | The user mapped to this function can view project. | |
| EST_PROJECT_SUMM | The user mapped to this function can view project summary. | ||
| EST_PROJECT_ADD | The user mapped to this function can create project. | ||
| EST_PROJECT_MOD | The user mapped to this function can modify project. | ||
| EST_PROJECT_COPY | The user mapped to this function can replicate project. | ||
| EST_PROJECT_DEL | The user mapped to this function can delete project. | ||
| PROJECT_WF | EST_PROJECT_CMT | The user mapped to this function can provide their comments on project. | |
| EST_PROJECT_REV | The user mapped to this function can review project. | ||
| EST_PROJECT_AUTH | The user mapped to this function can approve project. | ||
| PROJECT_EXECUTION | EST_PROJECT_EXEC | The user mapped to this function can run the projects. | |
| EST_PROJECT_RPLAT | The user mapped to this function can make the run parameter as latest. | ||
| PROJECT_RESULT | EST_PROJECT_RES | The user mapped to this function can view the results of the project. |
Table 3-3 List of STSA screens and their associated access codes
| Screen | Functionality | Function Code | Description |
|---|---|---|---|
| Project | Summary | EST_PROJECT_SUMM | Access to view project summary |
| Add | EST_PROJECT_ADD | Access to create new project | |
| Delete | EST_PROJECT_DEL | Access to create delete project | |
| Edit | EST_PROJECT_MOD | Access to edit a project | |
| Copy | EST_PROJECT_COPY | Access to copy a project | |
| View | EST_PROJECT_VIEW | Access to view a project | |
| Comment | EST_PROJECT_CMT | Access to comment on a project | |
| Review | EST_PROJECT_REV | Access to review a project | |
| Approve | EST_PROJECT_AUTH | Access to approve a project | |
| Execute | EST_PROJECT_EXEC | Access to run a project | |
| View Run Results | EST_PROJECT_VIEW_RES | Access to view results | |
| Make execution parameter latest | EST_PROJECT_RUN_LAT | For an execution, provide execution parameter | |
| Analysis Configuration | Summary | EST_AY_CFG_SUMM | Access to view analysis configuration summary |
| Add | EST_AY_CFG_ADD | Access to create new an analysis configuration | |
| Delete | EST_AY_CFG_DEL | Access to create delete an analysis configuration | |
| Edit | EST_AY_CFG_MOD | Access to edit an analysis configuration | |
| Copy | EST_AY_CFG_COPY | Access to copy an analysis configuration | |
| View | EST_AY_CFG_VIEW | Access to view an analysis configuration | |
| Comment | EST_AY_CFG_CMT | Access to comment on analysis configuration | |
| Review | EST_AY_CFG_REV | Access to review an analysis configuration | |
| Approve | EST_AY_CFG_APPR | Access to approve a analysis configuration | |
| Scope and Portfolio | Summary | EST_PORTFOLIO_SUMM | Access to view portfolio summary |
| Add | EST_PORTFOLIO_ADD | Access to create new a portfolio | |
| Delete | EST_PORTFOLIO_DEL | Access to create delete a portfolio | |
| Edit | EST_PORTFOLIO_MOD | Access to edit a portfolio | |
| Copy | EST_PORTFOLIO_COPY | Access to copy a portfolio | |
| View | EST_PORTFOLIO_VIEW | Access to view a portfolio | |
| Metrics | Summary | EST_METRICS_SUMM | Access to view metrics summary |
| Add | EST_METRICS_ADD | Access to add a new metrics | |
| Delete | EST_METRICS_DEL | Access to delete a metrics | |
| Edit | EST_METRICS_MOD | Access to edit a metrics | |
| Copy | EST_METRICS_COPY | Access to copy a metrics | |
| View | EST_METRICS_VIEW | Access to view the created metrics | |
| Review | EST_METRICS_REV | Access to review the metrics | |
| Approve | EST_METRICS_APPR | Access to approve a metrics | |
| Model | Summary | EST_MODEL_SUMM | Access to view Models summary |
| Add | EST_MODEL_ADD | Access to add a model | |
| Delete | EST_MODEL_DEL | Access to delete a model | |
| Edit | EST_MODEL_MOD | Access to modify a model | |
| Copy | EST_MODEL_COPY | Access to copy a model | |
| View | EST_MODEL_VIEW | Access to view a model | |
| Review | EST_MODEL_REV | Access to review a model | |
| Approve | EST_MODEL_APPR | Access to approve a model | |
| Variable | Summary | EST_VARIABLE_SUMM | Access to view a variable summary |
| Add | EST_VARIABLE_ADD | Access to add a variable | |
| Delete | EST_VARIABLE_DEL | Access to delete a variable | |
| Edit | EST_VARIABLE_EDIT | Access to edit a variable | |
| Copy | EST_VARIABLE_COPY | Access to copy a variable | |
| View | EST_VARIABLE_VIEW | Access to view a variable | |
| Review | EST_VARIABLE_REV | Access to review a variable | |
| Approve | EST_VARIABLE_APPR | Access to approve a variable | |
| Process Flow | View | EST_PROCESS_VIEW | Access to view a workflow |
| Summary | EST_PROCESS_SUMM | Access to view a workflow summary | |
| Add | EST_PROCESS_ADD | Access to add a workflow | |
| Modify | EST_PROCESS_MOD | Access to modify a workflow | |
| Copy | EST_PROCESS_COPY | Access to copy a workflow | |
| Delete | EST_PROCESS_DEL | Access to delete a workflow | |
| Configuration Summary | Summary | EST_CONFIG_SUMMARY | Access to view a workflow summary |
| View | EST_CONFIG_VIEW | Access to view a configuration | |
| Add | EST_CONFIG_ADD | Access to add a configuration | |
| Modify | EST_CONFIG_MOD | Access to modify a configuration | |
| Copy | EST_ CONFIG_DIM_HRCHY_MAP | Dimension and hierarchy mapping | |
| Search | EST_CONFIG_DIM_SEARCH | Access to search a configuration | |
| Edit | EST_CONFIG_DIM_SAVE | Access to save a configuration | |
| Scenario Management | Scenario Summary | EST_SCENARIO_SUMM | Access to view Scenario Summary screen |
| Add | EST_SCENARIO_ADD | Access to Add new Scenario Definition | |
| Delete | EST_SCENARIO_DEL | Access to Delete Scenario Definition | |
| Edit | EST_SCENARIO_MOD | Access to Edit Scenario Definition | |
| Copy | EST_SCENARIO_COPY | Access to Copy Scenario Definition | |
| View | EST_SCENARIO_VIEW | Access to View Scenario Definition | |
| Review | EST_SCENARIO_REV | Access to Review Scenario Definition | |
| Approve | EST_SCENARIO_APPR | Access to Approve Scenario Definition | |
| Export | EST_SCENARIO_EXP | Access to Export Scenario Definition | |
| Document Management | View | EST_DOCUMENT_VIEW | Access to view the document |
| Modify | EST_DOCUMENT_MOD | Access to modify the document | |
| Delete | EST_DOCUMENT_DEL | Access to delete the document | |
| Add | EST_DOCUMENT_ADD | Access to add the document | |
| Configuration Manager | View | EST_CONFIG_VIEW | Access to view configuration |
| Modify | EST_CONFIG_MOD | Access to modify configuration | |
| Summary | EST_CONFIG_SUMM | Access to view summary configuration |
After installing STSA, predefined groups are created where OFSAA users can be tagged to these predefined groups and these predefined groups are mapped to STSA roles and functions internally.
Table 3-4 List of predefined groups in STSA
| Predefined Group | Description |
|---|---|
| IDNTYAUTH | Identity Authorizer group |
| MDLUSR | Modeling User Group |
| MDLREV | Modeling Reviewer Group |
| MDLAPPR | Modeling Approver Group |
| PMFADMIN | Object migration administrator group |
| WKSPADMIN | Workspace administrator Group |
| DSUSRGRP | Datastudio User Group |
| SIMULATIONUSR | Simulation User Group |
| AYCFGADMIN AY_CFG | Analysis Configuration administrator group |
| PORTFOLIOADMIN | Portfolio administrator group |
| PROJECTADMIN | Project administrator group |
| SCENARIOADMIN | Scenario administrator group |
| METRICSADMIN | Metrics administrator group |
| PROCESSADMIN | Process administrator group |
| VARIABLEADMIN | Variable administrator group |
| CONFIGADMIN | Configuration administrator group |