Add users and groups to default roles

Service integration bus security uses role-based authorization. By adding selected users and groups to the default roles for all the local bus destinations on a secured bus, you provide those users and group members with access to the local bus destinations allowed to inherit default roles.

If a bus destination is not allowed to inherit the default roles, first add the user or group to the role that grants authorization permission for the specific local destination. For more information, see Add users and groups to destination roles.

The default roles are sender, receiver, creator and browser. In this task you use an console wizard, the Security wizard, to add selected users or groups to the default roles. The Security wizard requests information to enable it to retrieve selected users or groups from the potentially very large number of users and groups in the user repository.

1. Log onto the console.

2. Click Service integration -> Buses -> security_value -> [Authorization Policy] Manage default access roles. The Default access roles panel is displayed.

3. Expand the Default access header to list the users and groups that have been assigned to default access roles.

4. Click Add to start the Security wizard. The wizard takes you through the following steps to add selected users or groups to default access roles:

   1. Search for the users or groups to add to default access roles:

      Users or Groups

      Select either Users or Groups to specify whether to grant access roles to users or groups.

      Search pattern

      This field is mandatory. Specify a search string that is matched against user IDs or group names in the user repository. Only user IDs or group names that match the search pattern are retrieved, subject to the maximum number of search results. Wildcard characters are allowed.

      Maximum number of search results to display

      This field is mandatory. Specify the maximum number of user IDs or group names we want the console to display.

   2. Click Next. The wizard displays the users or groups in the user repository that match the information that you provided in the previous step.

   3. Select the check boxes next to the user IDs or group names to add to the default access roles, and click Next. A list of user IDs or group names that we can add to the default access roles is displayed. Note that some users or groups might already be assigned to default access roles.

   4. Select the role types to assign to a user or group. For example, to assign a group to the sender role, click the sender icon for the appropriate group name. The icon changes from

      

      to

      

      to show that we have added the user or group to the access role for the resource.

   5. Complete the previous step for each user or group to add to access roles, and then click Next. A summary of the role type assignments is displayed.

   6. Optional: Click Previous to review and change the assignments, if required.

   7. Click Finish to confirm the assignments. The Default access roles panel is redisplayed and shows the new role type assignments.

5. Save the changes to the master configuration.
   

Results

The selected users and groups are added to selected default roles for the selected bus.

Related concepts

Messaging security

Role-based authorization

Destination security

Bus destinations

Access role assignments for bus security resources

addGroupToDefaultRole command

addUserToDefaultRole command

Related information:

Listing users and groups in default roles

Remove users and groups from default roles