Creating a Role
A role is a collection of permissions that you assign to a user. If the predefined roles that come with Spectrum™ Technology Platform do not fit your organization's needs, you can create your own roles.
- Open Management Console.
- Go to System > Security.
- Click Roles.
- Click the Add button
.
Tip: If you want to create a role that's similar to an existing role, you can make a copy of the existing role by checking the box next to the role you want to copy then clicking the Copy button. Then, edit the new role and continue with the following steps.
- In the Role name field, enter the name you want to give to this role. The name can be anything you choose.
- Optional:
Since the list of secured entity types can be long, you may want to display
only a certain group of secured entity types. This can be useful if you want to
apply the same permissions to all entities in a group. For example, if you want
to remove the Modify permission from all database resources, you could filter to
show just the Database Resources group. To display and modify only one
group:
- Check the Enable group filtering box.
- Click the funnel icon in the header of the Group column and select the group you want to display.
- Check or clear the box in the column header of the permission you want to apply.
- To return to the full list of secured entity types, click the filter icon and select (All) then clear the Enable group filtering box.
-
Select the permissions you want to grant for each entity type. The permissions
are:
- View
- Allows the user to view entities contained by the entity type. For example, if you allow the View permission for the JDBC Connection entity type, users with this role would be able to view database connections in Management Console.
- Modify
- Allows the user to modify entities contained by the entity type. For example, if you allow the Modify permission for the JDBC Connection entity type, users with this role would be able to modify database connections in Management Console.
- Create
- Allows the user to create entities that fall into this entity type's category. For example, if you allow the Create permission for the JDBC Connection entity type, users with this role would be able to create new database connections in Management Console.
- Delete
- Allows the user to delete entities contained by the entity type. For example, if you allow the Delete permission for the JDBC Connection entity type, users with this role would be able to delete database connections in Management Console.
- Execute
- Allows the user to initiate processing of jobs, services, and process flows. For example, if you allow the Execute permission for the Job entity type, users with this role would be able to run batch jobs. If you allow the Execute permission for the Service entity type, users with this role would be able to access services running on Spectrum™ Technology Platform through the API or web services.
- Click Save.
The role is now available to be assigned to a user.