Configuring administrative roles

By configuring administrative roles, you can restrict access to collections and control the functions that each administrative user can do. After logging in to the administration console, the user accesses only the functions that are associated with the assigned administrative role, and retains those permissions for the duration of the administrative session.

Before you begin

When Watson Content Analytics is installed, the installer configures a user ID and password for the default administrator. The first time that you access the administration console, you must log in as this user.

Before you add other administrative users, ensure that the users are registered in the Lightweight Directory Access Protocol (LDAP) user registry that the Watson Content Analytics system is configured to use.

If you use WebSphere® Application Server, enable global security to configure the LDAP server and register users. All administrative users that you add to Watson Content Analytics must be registered in the user registry for the WebSphere Application Server LDAP server.

About this task

You can enroll users in the following administrative roles:

Master administrator
These users create collections and have the authority to administer all aspects of your system, including adding administrative users. Until the default administrator assigns other users to the master administrator role, only the default administrator can create collections or add administrative users.
Collection administrator
These users can edit, monitor, and control the operation of collections that they are authorized to administer. These users cannot create collections. If a master administrator enables the System toolbar and Solutions toolbar, collection administrators can also monitor and administer system-level activities and solution packages.
Operator
These users can monitor and control the operation of collections that they are authorized to administer. These users can start and stop collection activities, for example, but they cannot create collections or edit collections. If a master administrator enables the System toolbar and Solutions toolbar, operators can also monitor and administer system-level activities and feature packages.
Monitor
These users can monitor collections that they are authorized to administer. These users cannot control operations (such as starting and stopping servers), create collections, or edit collections. If a master administrator enables the System toolbar and Solutions toolbar, monitors can observe, but not administer, system-level activities and feature packages.
Content analytics administrator
These users can create, modify, and monitor analytic resources for the content analytics collections that they are authorized to administer (facets, dictionaries, and custom text analysis rules).
Facet tree administrator
These users can configure the facet tree for content analytics collections that they are authorized to administer.
Dictionary administrator
These users can configure custom user dictionaries for content analytics collections that they are authorized to administer.
Rule-based category administrator
These users can configure rule-based categories for enterprise search collections and content analytics collections.
Application customizer
These users can customize enterprise search applications and the content analytics miner by using the customizer applications. In the administration console, the only actions these users can do is click Search Customizer and Analytics Customizer.

Procedure

To assign a user to an administrative role:

  1. Click Security to open the Security view.
  2. In the system-level security area, click Actions > Add an administrative user.
  3. Type the user ID of the user that you want to enroll and select an appropriate administrative role.
  4. If the role is eligible, specify whether this user can access functions from the System toolbar. For example, you might want to allow some operators or collection administrators to start and stop system servers.
  5. If the role is eligible, specify whether this user can access functions from the Solutions toolbar. For example, you might want to allow some collection administrators to edit the collection configuration settings in a solution package.
  6. If you are not enrolling this user as a master administrator, select the collections that this user can administer. You can select the check boxes for individual collections or enable the user to administer all collections, all enterprise search collections, or all content analytics collections.

What to do next

You can edit a user's role, change the collections that the user is authorized to administer, or delete the user from the list of administrators. You cannot edit or delete the default Watson Content Analytics administrator.