Managing access control list

Create an access control list by assigning security roles to users or groups, in a certain security domain or in one or more folders.

You can:

Give access to user or group.
View access for user or group.
View access for Security Domain or folders.
Manage accesses.

Give access to user or group

To give access to users or groups complete the following procedure:

From the navigation toolbar, click Administration.
In the Workload Environment Design, select Manage Workload Security.
The Manage Workload Security panel opens.
From the drop-down list, select the IBM Workload Scheduler engine on which you want to manage security settings.
In the Access Control List section, click Give access to user or group.
The Create Access Control List panel opens.
Enter the user name or the group name, the assigned roles, and the security domain or enter the folders assigned. For each Access Control List you can associate one or more folders.
Click Save to save the access definition in the database.
Click Save and Create New to save the access definition in the database and proceed to create a new access definition.
Click Save and Exit to save the access definition in the database and return to the Manage Workload Security panel.

The access definition has now been added to the database. If the optman enRoleBasedSecurityFileCreation global option is set to yes, the access definition is activated in your security file.

View access for user or group

From Manage Workload Security, you can also view the access for users or groups.

In the Access Control List section of the Manage Workload Security panel, click View access for user or group.
The input field for the user or group name is displayed.
Enter the user or group name and click View.
The user or group access, with the assigned roles, to the related security domains is displayed.

View access for Security Domain

From Manage Workload Security, you can also view the access to a certain security domain.

In the Access Control section of the Manage Workload Security panel, click View access for Security Domain.
The input field for the security domain name is displayed.
Enter the security domain name and click View.
The list of users or groups, with the assigned roles, that have access to the specified security domain is displayed.

Manage accesses

From Manage Workload Security, you can also remove and edit existing access control lists.

In the Access Control List section of the Manage Workload Security panel, click Manage Accesses.
The list of users or groups, with the assigned roles, that have access to the different security domains is displayed.
Select the access control list that you want to manage.
Select the action that you want to run on the selected access control list.
If you select the edit action, you can change only the roles associated with the access control list. You cannot change the associated domain. If you want to change the domain, you must remove the access control list and redefine the access control list with a new domain.