Welcome
Deploying and Administrating
All the information you need to deploy and administrate HCL Universal Orchestrator.
Managing Workload Security
You can manage security settings in your environment from the Orchestration CLI and from the UI.
Managing security roles from the Orchestration CLI
In this topic you can find the syntax to create a security role.

What's new
HCL Universal Orchestrator is constantly evolving to offer you the most comprehensive orchestration capabilities. For known limitations, workarounds, and contact information of HCL Customer Support, see Release notes.
Getting started with HCL Universal Orchestrator
HCL Universal Orchestrator is a cloud-native workload orchestration and scheduling platform built on Kubernetes. Its microservices-based architecture enables the centralized orchestration of multi-cloud and hybrid environments from a single point of control.
Deploying and Administrating
All the information you need to deploy and administrate HCL Universal Orchestrator.
- Deploying HCL Universal Orchestrator
  Deploying HCL Universal Orchestrator requires the deployment of all its microservices, the UI, the cloud agent, and optionally, the Orchestration CLI.
- Installing and connecting HCL Workload Automation dynamic agent at version 10.2.3
  You can install agents at HCL Workload Automation to be able to manage all task integrations.
- File integrity and safety with SHA checksum
  Validate the authenticity and integrity of files downloaded from the Download Center ¹ in the UI by verifying their SHA checksums. SHA checksum validation ensures file integrity by comparing the hash value generated for a file, against a unique, pre-generated checksum. Each file in the Download Center is accompanied by its own unique SHA checksum.
- Installing HCL UnO agent
  HCL UnO agent is a versatile on-premises agent that can run all types of tasks with efficiency and reliability. You can configure the properties of the agent to connect it to the agent manager of HCL Universal Orchestrator.
- Installing and authenticating the Orchestration CLI
  Install, authenticate and configure the Orchestration CLI.
- Managing HCL UnO agent in Windows operating systems
  You can manage the agent by using scripts that are generated while configuring the agent or by daemon script. It is recommended to use any method for ideal cohesion and efficient administration.
- Managing HCL UnO agent in Unix operating systems
  You can manage the agent by using scripts that are generated while configuring the agent or by daemon script. It is recommended to use any method for ideal cohesion and efficient administration.
- Managing the AI agent
- Managing Workload Security
  You can manage security settings in your environment from the Orchestration CLI and from the UI.
  - Managing access control lists from the Orchestration CLI
  - Managing security roles from the Orchestration CLI
    In this topic you can find the syntax to create a security role.
  - Managing security access
  - Actions on security items
  - Managing authentication using API Keys
    Learn what API Keys are and how they can secure authentication quickly and easily.
- Configuring a user registry
  In this topic you can find information about how to configure a user registry.
- Keeping track of changes in your environment
  Administrators can request to specify a justification when saving or editing items to keep track of the changes in your environment.
- Managing multitenant security
- Policy-driven plan
  The new HCL Universal Orchestrator policy-driven adaptive plan makes your workload more autonomous, dynamic and scalable.
- Managing time zones
  In this topic you can find information about managing time zones.
- Observability
  Using third-party tools to monitor HCL Universal Orchestrator
Using the UI
The UI is the HCL Universal Orchestrator interface, from which you can design your scheduling environment and monitor every process.
Orchestrating
Orchestrate anything with HCL Universal Orchestrator.
Orchestrating from Mobile
You can use your mobile devices to manage quickly and easily your whole HCL Universal Orchestrator environment.
Monitoring
Take your environment under control.
Using REST API
Use REST APIs to easily integrate workload scheduling capabilities with external products and solutions.
Administering multitenancy for service providers
Configure and administer a HCL Universal Orchestrator multitenant environment.
Uno AI Pilot
Welcome to the HCL Universal Orchestrator AI Pilot documentation. This resource is designed to guide you through everything you need to know about using UnO AI Pilot effectively. You will find detailed instructions, feature overviews, and helpful tips to ensure you get the best experience with UnO AI Pilot.
UnO Agentic AI Builder
Troubleshooting
Recover your environment if any issue occurs.
Notices

Managing security roles from the Orchestration CLI

In this topic you can find the syntax to create a security role.

About this task

A security role represents a certain level of authorization and includes the set of actions that users or groups can perform on a set of item types.

Create new security role

About this task

To create a new standard security role, use the following syntax:

$securityrole SECURITYROLE STANDARD
                                        DESCRIPTION "This is securityRole #1"
                                        RESOURCE_1 ACTIONS...
                                        RESOURCE_2 ACTIONS...
                                        END

Supported Resources for standard roles:

JOB
JOBSTREAM
CPU
CALENDAR
CREDENTIALS
VARTABLE
FOLDER
ENDPOINT
EVENTSOURCE
RESOURCE
AIAGENT

Supported Actions for standard roles:

ADD
MODIFY
UNLOCK
USE
DISPLAY
LIST
DELETE
LIMIT
RUN
LINK
UNLINK
FENCE
ACL
CANCEL
DELDEP
SUBMIT
RELEASE
ALTPRI
ADDDEP
KILL
RERUN
CONFIRM
SUBMITDB

To create a new administrative security role, use the following syntax:

$securityrole SECURITYROLE ADMINSECROLE
                                        DESCRIPTION "Admin Security Role"
                                        ADMIN LISTALLAPIKEYS, DELETEALLAPIKEYS, CREATEPERSONALAPIKEY, CREATESERVICEAPIKEY, REGISTERAGENT, MANAGEAIPILOT, DELETEPLUGIN, INSTALLPLUGIN, LISTPLUGIN
                                        END

Supported Resources for administrative roles:

ADMIN

Supported Actions for administrative roles:

LISTALLAPIKEYS
DELETEALLAPIKEYS
CREATEPERSONALAPIKEY
CREATESERVICEAPIKEY
REGISTERAGENT
MANAGEAIPILOT
DELETEPLUGIN
INSTALLPLUGIN
LISTPLUGIN

Actions are role specific, and can be assigned either to administrative or standard roles.

For more information about actions available for each security item, see Actions on security items.

Results

The security role has now been added to the database.

Manage security roles

About this task

You can manage existing security roles. You can find the list of available commands below: