Home
Managing security
HCL Launch uses a flexible team-based and role-based security model that maps to your organizational structure.
Security teams
Users and groups on the server are assigned roles when they are added to teams.

Managing security
HCL Launch uses a flexible team-based and role-based security model that maps to your organizational structure.
- Guidelines for setting up server security
  Although there is no single best way to set up security for the server, the following steps are sufficient in most cases.
- SSL configuration
  With Secure Sockets Layer (SSL) technology, clients and servers can communicate securely by encrypting all communications. Data is encrypted before it is sent and decrypted by the recipient. This communication cannot be deciphered or modified by third-parties. In addition to encryption, SSL can also support authentication.
- Encryption key tools
  Using the encryption key tools, you can manage your encryption keys.
- Authorization realms
  Use the Authorization Realms pane to create authorization realms and user groups for the server. Groups can be imported from external systems, such as LDAP.
- Authentication realms
  Authentication realms manage users and determine user identity within authorization realms for the server.
- Roles and permissions
  A role is a list of permissions that users have on the HCL Launch server. These permissions include the ability to create, edit, and delete objects, such as applications, environments, and components. The permission also includes the parts of the server interface that users can access.
- Security teams
  Users and groups on the server are assigned roles when they are added to teams.
  - Creating teams
    Create teams to add users to and for managing access to resources on the server.
  - Assigning users to teams
    Assign users to teams so that users can be assigned to roles and work with objects that are associated with the teams.
  - Mapping teams to objects
    In addition to assigning a team to an object (such as a component or application), when you create the object, you can use the Teams page on the server to map teams to objects.
  - Assigning teams directly to items
    You can assign a team to an object (such as components or applications) when you create the object.
- Security types
  Security types define categories of objects on the server. You can put all objects into a single category, or you can put them in separate categories and give roles different access rights to different categories.
- Tokens
  Tokens provide authorization for agents, agent relays, users, and external systems or applications from the server. Agents use tokens when they run process steps and communicate with the HCL Launch server and external services.

Security teams

Users and groups on the server are assigned roles when they are added to teams.

Teams provide two important functions. First, a team provides the mechanism to assign roles to users. When a user is assigned a role, all permissions that are granted to the role are automatically granted to the user, but only for objects that the team has access to. Second, teams secure objects such as applications, components, and environments. When a team is attached to an object, only team members with the appropriate permissions can interact with the affected resource.

The System Team that comes with HCL Launch has all permissions granted for all Standard security types for its Administrator role.