Setting access controls

IBM Spectrum LSF Application Center has a flexible access control mechanism. You can control access to all pages of the web interface, and you can also control whether users can take actions on objects in pages.

Where users and user groups are defined
You do not create users or user groups in IBM Spectrum LSF Application Center. IBM Spectrum LSF Application Center automatically loads users and user groups defined in LSF®. This is controlled with the parameter ENABLE_USERGROUP in $GUI_CONFDIR/pmc.conf.
Default permissions for built-in and custom user roles
To give permissions to users and user groups, you define user roles. A user role is a common group of permissions.
Objects and available permissions
You can assign permissions to most objects in Platform Application Center. The following are the possible permissions that you can assign, and the objects that you can assign these permissions to. You can assign a combination of all these permissions to an object.
Configure administrators that are not LSF cluster administrators
By default, at installation, if you did not specify user accounts to be assigned the IBM Spectrum LSF Application Center administrator role, the LSF cluster administrators defined in the LSF configuration file lsf.cluster.cluster_name are automatically assigned the IBM Spectrum LSF Application Center administrator role. You can however, modify the role assignment and assign different users to be IBM Spectrum LSF Application Center administrators.
Enabling users who do not have OS user accounts to use IBM Spectrum LSF Application Center
When users do not have operating system user accounts on the Platform Application Center server, you can enable them to log in and use IBM Spectrum LSF Application Center by creating a user mapping script that maps login user accounts to operating system user accounts. This applies to both the graphical user interface as well as Web Services.
Restricting who can log in to IBM Spectrum LSF Application Center
To control which users can log in and use IBM Spectrum LSF Application Center, set the parameter ALLOW_UNKNOWN_USER=N in the configuration file pmc.conf. Only users that you specify can log on, and all other users are denied access. Also, set ENABLE_USER_GROUP=N in pmc.conf so that users and user groups are not automatically loaded from LSF.
Restricting users from viewing job data in IBM Spectrum LSF mobile client
By default, users can view job data files on their mobile device in IBM Spectrum LSF mobile client. You can disable viewing of job data files in IBM Spectrum LSF mobile client by setting the parameter MOBILE_VIEW_DATA=N in the configuration file $GUI_CONFDIR/pmc.conf. You can also restrict the number of lines that can be viewed at one time with the parameter MOBILE_VIEW_DATA_LINES.

Parent topic: Users and Security