Managing user permissions to access environments

If you have the Account Admin role, you provide access control and permissions for other users. You specify which environments a user can access and the IBM® Business Process Manager groups that the user is assigned to within each environment.

About this task

When users are invited to join the IBM BPM on Cloud environment that you administer, their user IDs are each assigned permission to access the Process Runtime Operating Environment as a participant. In IBM BPM on Cloud, Account Admin users assign permissions that enable users to access specific deployment environments. Each IBM BPM on Cloud environment provides the functions that users need to accomplish the tasks that are assigned to them, such as authoring, testing, or using business processes and applications. For example, a user with permission to access the IBM BPM on Cloud Development Environment can author business processes.

When users are invited to join the IBM BPM on Cloud environment that you administer, their user IDs are each assigned permission to access the Process Runtime Operating Environment as a participant. Users who are listed under the Full Name column as Invited User were sent instructions to configure their access information. However, the invited user has not yet configured the access.

Procedure

Log in to IBM BPM on Cloud (https://www.bpm.ibmcloud.com) and click the Admin tab. You complete the following administrative tasks in the User Management window:

Assign or remove permission to access IBM BPM on Cloud environments for each user ID. Select or clear the access to each of the following IBM BPM on Cloud environments in the Environment Access Permissions section:
- Development
- Test
- Process Runtime
Important: You can assign permission to access the Development Environment to only five users in the IBM BPM on Cloud environment that you administer. If five users are assigned permission to access the Development Environment, you must first remove this access from a user before you assign it to another user.
Assign or remove permission to access IBM BPM deployment environments for users with access that is configured.
1. In the row for the user that you are defining permission for, select the environment, or environments. Select the access to each of the following IBM BPM on Cloud environments in the Environment Access Permissions section:
  - Development
  - Test
  - Process Runtime
2. Select the permission to access the IBM BPM deployment environment that you want to assign. Click the user group icon () to assign or remove the following IBM BPM privileges:
  tw_admins
  
  Group for users with full access to IBM Process Center.
  
  Debug
  
  Group for users with access to the debug feature.
  
  twen
  
  Group for users with Event Manager access.
  
  tw_authors
  
  Group for users with IBM Process Designer Authoring access.
3. Close the IBM BPM Group Management window.
Your changes are automatically saved as you make them.
Track user access. From the status at the top of the User Management window, you can see how many users have permission to access each environment. You can also see how many user access permissions in each environment are available for use. These quantities are updated in the user access table while you add or remove user access. The maximum number is the maximum number of user accesses that were purchased with your subscription. For example, you might see that there are 4 of 5 available authors and 100 of 150 available users.
Remove a user from your IBM BPM on Cloud environment.