removeGroupfromDefaultRole command
Use the removeGroupFromDefaultRole command to remove a group from the default roles for a local bus.
To run the command, use the AdminTask object of the wsadmin scripting client.
The wsadmin scripting client is run from Qshell. For more information, see Configure Qshell to run WebSphere scripts .
This command is valid only when used with WAS v7 or later application servers. Do not use it with earlier versions.
Command-line help is provided for service integration bus commands:
- For a list of the available service integration bus security commands in Jython and a brief description of each command, enter the following command at the wsadmin prompt:
print AdminTask.help('SIBAdminBusSecurityCommands')
- For overview help on a given command, enter the following command at the wsadmin prompt:
print AdminTask.help('command_name')
After using the command, save the changes to the master configuration using the following command:
AdminConfig.save()
Purpose
Use the removeGroupFromDefaultRole command to remove a group from the default roles for a local bus. Removing a group from the default roles prevents access to the local bus in the default roles.
Target object
None.
Required parameters
- -bus busName
- The name of the local bus. We can use the listSIBuses command to list the names of existing buses.
- -role roleType
- The role type from which to remove the group.
- Sender
- This role type is authorized to send messages to destinations on the local bus.
- Receiver
- This role type is authorized to receive messages from destinations on the local bus.
- Browser
- This role type is authorized to browse messages on destinations on the local bus.
- Creator
- This role type is authorized to create messages on destinations on the local bus.
- -group groupName or uniqueName
- The name of a group to remove from the default roles for the local bus. We can type one of the following names:
- A security group name, or one of the following specialized group names:
- Server
- This group contains application servers.
- AllAuthenticated
- This group contains authenticated users only.
- Everyone
- This group contains all users. Each user is anonymous.
- A unique group name.
Conditional parameters
None.
Optional parameters
None.
Examples
The following example removes a group called Group1 from the default Sender role type for a bus called Bus1.
AdminTask.removeGroupFromDefaultRole ('[-bus Bus1 -role Sender -group Group1]')
The following example removes the AllAuthenticated group from the default browser role for a bus called Bus1.
AdminTask.removeGroupFromDefaultRole ('[-bus Bus1 -role Browser -group AllAuthenticated]')
Related concepts
Role-based authorization Destination security Bus destinations
Related tasks
Remove users and groups from default roles
listGroupsInDefaultRole command addGroupToDefaultRole command listUsersInDefaultRole command addUserToDefaultRole command removeUserfromDefaultRole command Reference topic