Objects and available permissions

Edit online

You can assign permissions to most objects in IBM Spectrum LSF Application Center. The following are the possible permissions that you can assign, and the objects that you can assign these permissions to. You can assign a combination of all these permissions to an object.

The tables below provide details on each permission category and actions a user can take based on the permission category.

Note: A circle Yes indicates the permission is granted. An empty box indicates the permission is not granted.

Custom tree node permissions

Edit online

The custom tree node is the overall name of the navigation tree node that the LSF Application Center administrator added to the default navigation tree node. This custom name appears as a menu tab in the navigation tree.

Selection What it affects Actions Permissions
Control Configure View None
All custom tree nodes, or specific tree nodes Navigation tree node View     Yes  

Application template permissions

Edit online

Application template permissions affect application templates as well as the default submission form that is published for an application, the navigation tree entry Workload > Definitions > Templates, and from submission and viewing template details through Web Services.

If you want to define access for the submission forms that are copied from the default submission forms by users to create their own pre-filled forms, you can do that in the Custom Submission Forms section of the Permissions list on the User Roles & Permissions page.

Selection What it affects Actions Permissions
Control Configure View Only None
All application templates, or specific application templates Application templates View     Yes  
New Yes Yes    
Unpublish Yes Yes    
Publish Yes Yes    
Save As Yes Yes    
Delete Yes Yes    
Modify   Yes    
Default submission forms View     Yes  
Submit Yes Yes    
Save As   Yes    
Revert Yes Yes    
Web Services Submit a form through Web Services Yes      
View template details through Web Services   Yes Yes  

Custom submission forms permissions

Edit online

Custom submission forms are those copied by users from the default submission forms published for an application. Users use Save As to create a copy of the default submission form and prefill their new form with values applicable to them.

To allow users to create their own forms and view their own forms, select None for All custom submission forms, and select View, Control, and Configure for Own submission forms. Users will be able to view and perform actions on their submission forms but will not be able to see the submission forms saved by other users.

To prevent users from saving their own forms from the default forms, select None for both All custom submission forms and Own submission forms. You will also need to select View and Control under Submission Templates for specific applications so that users will no longer see the Save, Save As, or Delete buttons on the default submission forms published for applications.

Selection What it affects Actions Permissions
Control Configure View None
All custom submission forms All submission forms copied by all users with Save As from the default published form for an application View     Yes  
Submit Yes Yes    
Save   Yes    
Save As   Yes    
Revert Yes Yes    
Delete   Yes    
Forms of user group All submission forms copied by users in the specified user group with Save As from the default published form for an application Same actions and permissions as All custom submission forms with the difference that the permissions only applied to forms saved by users in the specified user group.        
Own submission forms All submission forms copied by the user with Save As from the default published form for an application Same actions and permissions as All custom submission forms with the difference that the permissions only applied to forms saved by the user        

Custom objects permissions

Edit online
Custom objects permissions affect pages created with the IBM Spectrum LSF Application Center page customization framework. Each new page and its related workflows are defined through an XML element <pac:service> in the file: $GUI_CONFDIR/service/services.xml.
Selection What it affects Actions Permissions
Control Configure View None
All custom objects, or specific custom objects All custom pages created by editing the file $GUI_CONFDIR/service/services.xml,, and defined with the element <pac:service> User can view custom pages     Yes  
User can interact with custom page and click buttons Yes      

Dashboard permissions

Edit online

Dashboard permissions affect the Dashboard under Resources tab.

Selection What it affects Actions Permissions
Control Configure View None
Dashboard Resources > Dashboard page View     Yes  
Interaction with the charts in Dashboard Select which charts to display and change time period Yes      

Hosts permissions

Edit online

Hosts permissions affect visibility of the Resources > Hosts page on the navigation tree, and actions users can take on hosts.

Selection What it affects Actions Permissions
Control Configure View None
All hosts Resources > Hosts page View     Yes  
Open hosts Yes      
Close hosts Yes      

Jobs, Job Data, Job Consoles permissions

Edit online

Permissions are set for Jobs. These permissions also affect Job Data, and Job Consoles pages.

Important:

Directories a user can see in Job Data > Shared Directories, and actions a user can take in those directories is not defined through IBM Spectrum LSF Application Center. Those permissions are defined through the user’s file permissions in the operating system on the host on which those files reside.

Selection What it affects Actions Permissions
View Control Configure None
All jobs All jobs submitted by all users through IBM Spectrum LSF Application Center and Web Services View Yes      
New   Yes Yes  
Suspend   Yes Yes  
Resume   Yes Yes  
Kill   Yes Yes  
Rerun   Yes Yes  
View Output   Yes Yes  
Delete Directories   Yes Yes  
Resubmit   Yes Yes  
Job Data details, and all job data for all users and all jobs View Yes      
Delete job directories   Yes Yes  
Tail   Yes Yes  
Open   Yes Yes  
Download   Yes Yes  
Copy to   Yes Yes  
Move to   Yes Yes  
More Actions   Yes Yes  
Workload > Tools > Remote Consoles page View Yes      
Open My Console   Yes Yes  
Close   Yes Yes  
Jobs of submission template Affects same objects and performs same actions as All Jobs with the exception that user can only view jobs, job data, and remote consoles and take actions for specific submission templates and jobs submitted with the specific submission forms
Jobs of user group Affects same objects and performs same actions as All Jobs with the exception that user can only view jobs, job data, and remote consoles and take actions for jobs submitted by users in the specified user group
Own Jobs Affects same objects and performs same actions as All Jobs with the exception that user can only view jobs, job data, and remote consoles and take actions for jobs that the user submitted
Job Details Permissions, User's Own Jobs Visibility of the Job Details pane for jobs the user submitted.   Yes      
Job Details Permissions, Other Users' Jobs Visibility of the Job Details pane for jobs submitted by other users.   Yes      

Job Flows permissions

Edit online
Applies to View Control Configure None
All job flows
  • View flows in the Workload page
  • View chart
 All job flow actions on all job flows in the system:
  • Kill
  • Suspend
  • Resume
  • Rerun
  • Set flow variables
 N/A. Job flows are configured outside IBM Spectrum LSF Application Center. Job flows are not visible to the user.
User's own job flows Same view as All job flows with the exception that users can only view job flows that they submitted. Same control actions as All job flows with the exception that users can only control flows that they submitted. N/A. Job flows are configured outside IBM Spectrum LSF Application Center. Job flows are not visible to the user.

Job Flow Definitions permissions

Edit online
Applies to View Control Configure None
All job flow definitions
  • View Flow Definition page
  • View chart
  • Export
  • Submit
  • Enable/disable event triggers
  • Set default version
  • Create
  • Modify
  • Delete
  • Move to
  • Publish/unpublish
  • Copy
 Job flows and job flow definitions are not visible to the user.
User's own job flow definitions Same view as All job flow definitions with the exception that users can only view job flows that they submitted. Same control actions as All job flow definitions with the exception that users can only control flows that they submitted. Same configure actions as All job flow definitions with the except that users can only configure flows that they submitted. Job flows and job flow definitions not visible to the user.

Reports permissions

Edit online

Only available when LSF Explorer is installed.

Applies to View Control Configure None
Reports View all dashboards and charts Create custom dashboards and charts Modify and delete custom dashboards and charts Reports are not visible to the user.

Settings permissions

Edit online

The Settings permission affects security (user roles and permissions).

Applies to View Control Configure None
User Roles & Permissions View Settings, Role-based access control N/A Modify roles and permissions Settings are not visible to the user

Definitions Folder Organization permissions

Edit online

The Definition Folder Organization affects permissions to view folders, create and delete folders, and move and modify folders in Workload > Definitions.

Selection What it affects Actions Permissions
Control Configure View None
Definitions Folder Organization

Folders in Workload > Definitions, Workload > Definitions > Templates, and Workload > Definitions > Flow Definitions

 View folders     Yes  
  Create and delete folders Yes      
  Modify and move folders   Yes    

System permissions

Edit online

System permissions are only applicable when IBM Spectrum LSF Suite is installed.

Selection What it affects Actions Permissions
Control Configure View None
  • LSF Configuration
  • LSF Daemons
  • LSF logs
  • PWS Settings
 Host Details > LSF logs page

Job Details > Usage Charts

 View N/A N/A View Host Details > Logs

Host Details > Monitor usage charts

Job Details > Monitor usage charts

 Logs and charts are not visible to the user

Usage Statistics permissions

Edit online

Usage Statistics permissions affect visibility of the System & Settings > Usage Statistics page on the navigation tree, and whether users can interact with the charts.

Selection What it affects Actions Permissions
Control Configure View None
Usage Statistics System & Settings > Usage Statistics page View     Yes  
Change chart time periods and show more or less data   Yes