Welcome
Managing security
HCL Launch uses a flexible team-based and role-based security model that maps to your organizational structure.
Authorization realms
Use the Authorization Realms pane to create authorization realms and user groups for the server. Groups can be imported from external systems, such as LDAP.
Creating groups manually
Groups are logical containers that are mechanisms that grant permissions to multiple users; members automatically share a group's permissions. Only authorization realms of the internal storage type can have manually created groups. Others types, such as LDAP, import groups cannot have manually created groups.

Welcome
Welcome to the HCL Launch 7.3.2 documentation, where you can find information about how to install, maintain, and use HCL Launch.
Release information
Overview
This section provides overview and getting started information.
Learning
Tutorials and instructions for all experience levels.
Installing
An HCL Launch installation consists of the HCL Launch server, a database, and at least one agent.
Upgrading and migrating
Learn how to upgrade HCL Launch elements, including the server, agents, and how to migrate data.
Uninstalling
Learn how to uninstall an HCL Launch server, or agent.
Integrating
HCL Launch supports integrations with other IBM® products, products from others, and certain cloud systems.
Administering
Learn how to administer settings in HCL Launch elements and communication between the elements.
Managing security
HCL Launch uses a flexible team-based and role-based security model that maps to your organizational structure.
- Guidelines for setting up server security
  Although there is no single best way to set up security for the server, the following steps are sufficient in most cases.
- SSL configuration
  With Secure Sockets Layer (SSL) technology, clients and servers can communicate securely by encrypting all communications. Data is encrypted before it is sent and decrypted by the recipient. This communication cannot be deciphered or modified by third-parties. In addition to encryption, SSL can also support authentication.
- Encryption key tools
  Using the encryption key tools, you can manage your encryption keys.
- Authorization realms
  Use the Authorization Realms pane to create authorization realms and user groups for the server. Groups can be imported from external systems, such as LDAP.
  - Creating an internal storage authorization realm
    Internal storage realms do not retrieve users from any external source. Instead, you add users to internal storage authorization realms manually.
  - Creating an LDAP authorization realm
    An LDAP authorization realm defines how to use an external LDAP server for group authorization.
  - Creating an SSO authorization realm
    A single sign-on (SSO) authorization realm uses an external server for authorization.
  - Creating groups manually
    Groups are logical containers that are mechanisms that grant permissions to multiple users; members automatically share a group's permissions. Only authorization realms of the internal storage type can have manually created groups. Others types, such as LDAP, import groups cannot have manually created groups.
  - Adding users to groups manually
    Authorization realms of the internal storage type can have manually created users. Others types, such as LDAP, import user groups cannot have manually created users.
- Authentication realms
  Authentication realms manage users and determine user identity within authorization realms for the server.
- Roles and permissions
  A role is a list of permissions that users have on the HCL Launch server. These permissions include the ability to create, edit, and delete objects, such as applications, environments, and components. The permission also includes the parts of the server interface that users can access.
- Security teams
  Users and groups on the server are assigned roles when they are added to teams.
- Security types
  Security types define categories of objects on the server. You can put all objects into a single category, or you can put them in separate categories and give roles different access rights to different categories.
- Tokens
  Tokens provide authorization for agents, agent relays, users, and external systems or applications from the server. Agents use tokens when they run process steps and communicate with the HCL Launch server and external services.
Modeling software deployment
Modeling software deployment in HCL Launch includes configuring components and component processes and adding those components to applications. Then, you use processes to deploy the components to environments.
Deploying
Learn how to deploy applications in HCL Launch.
Reporting
Provides several different deployment and security reports.
Extending product function
Learn how to extend the function of HCL Launch.
Troubleshooting and support
Learn how to troubleshoot some common issues with HCL Launch.
Glossary

Creating groups manually

Groups are logical containers that are mechanisms that grant permissions to multiple users; members automatically share a group's permissions. Only authorization realms of the internal storage type can have manually created groups. Others types, such as LDAP, import groups cannot have manually created groups.

About this task

Note:

Adding groups to LDAP and SSO realms is deprecated.

Procedure

On the server, click Settings > Authorization (Groups) > Groups > Create Group. The Create Group dialog box opens.
Provide a name for the group.
Select an authorization realm.
Groups are valid only for the selected realm.
Click Save.