Configuring roles to access the Dynamic Workload Console

During the Dynamic Workload Console installation, new predefined roles are created. They determine which console panels are available to a user, and therefore which activities that user can perform from Dynamic Workload Console. More roles can be created and customized according to business needs. For more information about the creation of customized roles, see Customizing roles

Tip
It is not necessary to assign a role to every single user. If the user registry already contains groups of users that are properly defined for using the console, it is possible to assign roles to groups too. If groups are not available in the user registry, then the special role all authenticated users can be used to assign roles to all the users at once.
To assign roles to a default groups of users that are properly defined for using the console, add this property to the authentication file in use. 
<jndiEntry jndiName="all.authenticated.users" value="my-group" />
.
Within the Dynamic Workload Console, you can create your own custom views to enable users to see all or a subset of HCL Workload Automation pages. To do it, you must have the Administrator role and perform the following steps:
  1. Open the authentication_config.xml located in the following path:
    On UNIX operating systems
    DWC_DATA_dir/usr/servers/dwcServer/configDropins/overrides
    On Windows operating systems
    DWC_home\usr\servers\dwcServer\configDropins\overrides
  2. Add the entity specifying username and password in users or groups.
  3. Open Dynamic Workload Console > Administration > Manage Roles
  4. Click Entities to associate the user or the group you have created to one of the roles from the list.
  5. Add the entity and save.
The following lists the predefined roles created in WebSphere Application Server Liberty for accessing the HCL Workload Automation environments using Dynamic Workload Console:
API User
Users in this group can use only the Dynamic Workload Console APIs to perform the available actions. Logging to the Dynamic Workload Console through a Web browser would not give them access to any feature. For more details about the Dynamic Workload Console APIs, see https://<DWC_hostname>:<port>/dwc/api.
Administrator
Users with this role can see the entire portfolio and use all features of the Dynamic Workload Console.

Users with this group can also access and use all features of the Self-Service Catalog and theSelf-Service Dashboards mobile applications. From the Self-Service Catalog mobile application, these users can create and edit catalogs, create and edit services, add services to catalogs, submit services associated to job streams, and share catalogs and services with other users. From the Self-Service Dashboards mobile application, these users can create and edit dashboards to filter for jobs and workstations, display a dashboard of results, perform recovery actions on a single result.

From the Manage Roles panel, the administrator can add entities, manage pinned pages and shared boards.
Analyst
Users in this group can manage Dynamic Workload Console reports and user preferences.
Broker
Users in this group can define Broker settings, create and manage Broker jobs and resources, and monitor Broker computers and resources.
Developer
Users in this group can create, list, and edit workload definitions, workstations, and event rule definitions in the HCL Workload Automation database.
Mobile User

Users in this group can manage the Self-Service Catalog and theSelf-Service Dashboards mobile applications but the actions they can perform are limited to submitting service requests (job streams) from the Self-Service Catalog and , from the Self-Service Dashboards mobile application, displaying a dashboard of results and performing recovery actions on them.

Operator
Users in this group can see Dynamic Workload Console:
  • All Monitor tasks.
  • Jobs and job streams to be submitted on request
  • Set User Preferences
The following table lists some entries of the navigation toolbar, and some activities that you can perform on the Dynamic Workload Console. Beside each item, the table shows the groups whose users are authorized to access them.
Table 1. Menu and Group Permissions
Menu Item Groups with Permission
Quick Start Administrator
All Configured Tasks

Administrator,
Operator
Manage Workload Reports Administrator, Analyst
Design -> Workload Definitions

Administrator
Developer
Planning & Submission -> Workload Forecast

Administrator,
Operator
Administration -> Workload Submission

Administrator
Operator
Monitoring & Reporting

Administrator,
Operator
Design -> Workload Definitions

Administrator
Reporting

Administrator,
Analyst
Security ->Manage Engines

Administrator

Security -> Manage Settings

Administrator

Administration → Broker Settings; Design → Broker Design; Monitoring & Reporting → Broker Monitoring

Administrator, Broker