Assign MobileFirst Server administration roles to users and groups
After the installer deploys server administration web applications to the web application server, we can assign security roles to users and groups.
The MobileFirst Server administration has the following Java EE security roles include..
- worklightadmin
- worklightdeployer
- worklightoperator
- worklightmonitor
The worklightmonitor role can view data but cannot change any data. The purpose of the roles is illustrated by the following table.
Administrator Deployer Operator Monitor Java EE security role. worklightadmin worklightdeployer worklightoperator worklightmonitor Deploy an application. Y Y Deploy an adapter. Y Y Configure runtime settings. Y Y Upload new MobileFirst application. Y Y Remove MobileFirst application. Y Y Upload new MobileFirst adapter. Y Y Remove MobileFirst adapter. Y Y Turn on or off application authenticity testing for an application. Y Y Change application status: Active, Active Notifying, Disabled. Y Y Y Lock an application so the new artifacts cannot be used for a version. Y Y Y Unsubscribe a device from SMS notification. Y Y Configure Push. Y Y Enable and disable device logging remotely. Y Y Y Configure log levels. Y Y Y Disable the specific device, marking the state as lost or stolen so that access from any of the applications on that device is blocked. Y Y Y Disable a specific application, marking the state as disabled so that access from the specific application on that device is blocked. Y Y If we choose to use an authentication method through a user repository such as LDAP, we configure MobileFirst Server administration so we can use users and groups with the user repository to define the Access Control List (ACL) of the MobileFirst Server administration. This procedure is conditioned by the type and version of the web application server that we use.
See
- Configure WAS full profile for administration
- Configure WAS Liberty profile for administration
- Configure Apache Tomcat for administration
Parent topic: Install administration services and the operations console