Select an Application Role Dialog

3.44 Select an Application Role Dialog

Use to select an application role.

Application roles are used by secured applications and are specific to an application. These roles are seeded by applications in the farm policy store during application registration. Application roles are also created in the context of end users accessing the application.

Application roles consist of users or other roles grouped logically for application-level authorizations. These roles are application-specific and are defined in the application Java policy store rather than the identity store. These roles are used by the application directly and are not necessarily known to a Java EE container.

Application roles define policy. Java permissions can be granted to application roles. Therefore, application roles define a set of permissions granted to them directly or indirectly through other roles (if a role is granted to a role). The policy can contain grants of application roles to enterprise groups or users. In the jazn-data.xml file of the file-based policy store, these roles are defined in <app-role> elements under <policy-store> and written to system-jazn-data.xml at the farm level during deployment. You can also define these roles after deployment using Oracle Enterprise Manager Fusion Middleware Control Console. You can set a task owner or approver to an application role at design time if the role has been previously deployed.

Element	Description
Application Server	Select the type of application server that contains the application role or click the Create icon to launch the Create Application Server Connection wizard and create a new application server connection.
Application	Select the application that contains the application roles (for example, soa-infra for the SOA Infrastructure application or b2bui for Oracle B2B).
Available	Select appropriate application roles and click the > button. To select all, click the >> button.
Selected	Displays the selected application roles. To remove a role, select it and click the > button. To remove all, click the >> button.
Name	Displays the application role selected in the Available column.
Description	Provides a description of the application role.