Next-generation platform

Defining resource permissions for Order Hub

Create or update a user group's resource permissions to determine the pages and actions that users can access within Order Hub. Every user that wants access to Order Hub must belong to a user group.

It is recommended that you create a custom group and configure resource permissions in your custom group. Do not modify the default groups OCAdminGroup and OCBusUserGroup. Future updates from IBM might override the permissions in the OCAdminGroup and OCBusUserGroup user groups. Also, periodically review your custom user group resource permissions as Order Hub introduces new pages and actions. New pages and actions are not enabled by default for your custom user groups.
Note: If you added custom pages and actions to Order Hub, you can create resource IDs to set up access control for them. Then, update the user group's resource permissions to grant or revoke access. For more information about creating resource IDs, see Creating resource permissions for custom pages and actions.

About this task

IBM provides two user groups with the following default resource permissions. You can copy these user groups as a starting point and modify your new group.
User groups for Order Hub
Group name Description
OCAdminGroup Users in this group have full access and can view all the following pages and complete all actions.
  • Home
  • Workspaces
  • Nodes and capacity
  • Orders
  • Shipments
  • Inventory
  • Fulfillment
    • Sourcing
    • Scheduling
    • Sourcing tester
  • Alerts
  • Exceptions
  • Settings
    • Alert rules
    • Distribution groups
    • Configuration
    • User roles
    • Customizations
OCBusUserGroup Users in this group have limited access when compared to OCAdminGroup. This group has access to the following pages.
  • Home
  • Workspaces
  • Nodes and capacity
  • Orders
  • Shipments
  • Inventory
  • Fulfillment
    • Sourcing (read only)
    • Scheduling (read only)
    • Sourcing tester
  • Alerts
  • Settings
    • Alert rules
    • Distribution groups

Procedure

  1. Log in to the IBM Sterling Order Management System Applications Manager to add users to a user group.
    For more information, see Starting the Applications Manager.
  2. Select Applications > Applications Platform.
  3. Open Security > Groups.
  4. Open an existing group with Order Hub permissions to view the group details.
    It is recommended that you create a custom user group and edit the custom group. Do not modify the default OCAdminGroup or OCBusUserGroup.
    Tip: You can copy one of the existing groups as a starting point. For more information, see Defining user groups.
  5. To modify the user group permissions, open the Order Hub permissions module and edit the permissions as needed.
    Groups page is open with the Order Hub permissions module option highlighted
  6. Edit the permissions as needed by selecting Grant permission or Revoke permission for the entity or view.
    Screen capture of the permissions module with the option to Grant or Revoke permission.
    Note: If users cannot access an action after you grant permission for the group, ensure that modifications are allowed for that action. For more information, see Defining modification rules.

Now that the user groups are defined, you can add users to the user group.

  1. Complete the following steps to assign existing users to the user group. If you add a user to multiple groups, the user has access to the highest permissions granted in any of the assigned groups.
    Note: Ensure that you keep your users in their current user groups for accessing the Applications Manager. These groups provide the necessary permissions to the underlying APIs that are used in the Order Hub user interface.
    1. Within the user group, select User Subscriptions.
    2. Click Find users to add to group.
    3. Search for the user or team and then click Add users to group.
    4. Click Save.
  2. Complete the following steps to assign new users who do not exist in the Application Platform console.
    1. Create the user within the Security > Users menu.
      Ensure that the user's IBMid exists in the Email field of the Contact Info tab
    2. Subscribe the user to the user group. For more information about how to subscribe a user to a group, see Creating a user.
    Note:
    • Multiple users cannot have the same IBMid in the Email field. Each unique User ID must have a unique Email address.
    • Ensure that you also add the user to user groups that provide access to the Applications Manager. These groups provide the necessary permissions to the underlying APIs that are used in the Order Hub user interface.