Table of Contents

Search

  1. Preface
  2. Starting Data Archive
  3. System Configuration
  4. Database Users and Privileges
  5. Source Connections
  6. Target Connections
  7. Archive Store Configuration
  8. Datatype Mapping
  9. Database Optimization
  10. SAP Application Retirement
  11. z/OS Source Data Retirement
  12. Seamless Data Access
  13. Data Discovery Portal
  14. Security
  15. LDAP User Authentication
  16. Auditing
  17. Running Jobs from External Applications
  18. Upgrading Oracle History Data
  19. Upgrading PeopleSoft History Data
  20. Data Archive Maintenance
  21. Storage Classifications
  22. Appendix A: Datetime and Numeric Formatting
  23. Appendix B: Data Archive Connectivity

Administrator Guide

Administrator Guide

Role Assignments

Role Assignments

To perform tasks and to access data in Data Archive, you must assign users to roles. Roles determine the tasks that users can perform or the data that users can access. The way you assign roles to users depends on if you enable role assignment synchronization. You enable role assignment synchronization in the
conf.properties
file.
When you run the Sync with LDAP Server job, the job assigns the User system-defined role to the user account. You need the User role to log in to Data Archive. You need to assign any relevant additional roles to the user. You can assign roles to users in the LDAP directory service, or you can assign roles in Data Archive after you synchronize users.
If you enable role assignment synchronization, then you maintain role assignments in the LDAP directory service. You add roles to users and maintain subsequent role changes in the LDAP directory service. The role assignments are synchronized when users log in to Data Archive. You can view the role assignments when you view the user account in Data Archive.
If you do not enable role assignment synchronization, then you maintain role assignments in Data Archive after you synchronize users. You add roles directly to the user account after the initial user synchronization. You maintain any subsequent role changes in Data Archive.

0 COMMENTS

We’d like to hear from you!