Configuring security on Liberty profile
If you implement security by using a security provider such as Resource Access Control Facility (RACF®), you can set up some of the RACF tasks by running the provided JCL jobs. You can define a set of EJBROLE values to give users various access rights to zRule Execution Server for z/OS and Decision Center.
Before you begin
Before you define the EJBROLE values, you must set up some additional WebSphere
Liberty security. For more information,
see Liberty profile: Accessing z/OS® security resources using WZSSAD
and Securing optimized local adapters on Liberty for z/OS
.
About this task
| Component | EJBROLE value |
|---|---|
| Rule Execution Server | ++WLPSAFPREF++.res.resAdministrators ++WLPSAFPREF++.res.resDeployers ++WLPSAFPREF++.res.resMonitors ++WLPSAFPREF++.res.resExecutors |
| Testing and simulation | ++WLPSAFPREF++.testing.resAdministrators ++WLPSAFPREF++.testing.resDeployers ++WLPSAFPREF++.DecisionRunner.resAdministrators ++WLPSAFPREF++.DecisionRunner.resDeployers |
For application security, Rule Execution Server applications use the EJBROLE values to determine which users and groups are allowed access and what tasks they can do.
The job HBRWLPR is a sample job for defining the EJBROLE values to be used by Operational Decision Manager on the WebSphere Liberty server.