User RunAs collection
Map a specified user identity and password to a RunAs role. This panel enables us to specify application-specific privileges for individual users to run specific tasks using another user identity.
To view this administrative console page:
- Click Applications > Application Types > WebSphere enterprise applications > application_name.
- Under Detail properties, click User runAs roles.
The enterprise beans that we install contain predefined RunAs roles. RunAs roles are used by enterprise beans that need to run as a particular role for recognition while interacting with another enterprise bean.
Username
User name for the RunAs role user.
This user already maps to the role specified in the Mapping users and groups to roles panel. We can map the user to its appropriate role by either mapping the user to that role directly or mapping a group containing the user to that role. After we specify the user name and password for the user and select a RunAs role, click Apply.
The use of the username field is dependent on whether system authorization facility (SAF) delegation is enabled or disabled.
- SAF delegation is enabled. The username field is NOT used.
- SAF delegation is disabled. The username field is used.
Information Value Data type: String
Password
Password for the RunAs user.
The use of the password field is dependent on whether system authorization facility (SAF) delegation is enabled or disabled.
- SAF delegation is enabled. The password field is NOT used.
- SAF delegation is disabled. The password field is used.
Information Value Data type: String
Role
Maps specific capabilities to a user.
The authorization policy is only enforced when global security is enabled.
Assigning users to RunAs roles Assigning users and groups to roles