As a first step, the Identity Service administrator in your organization must assign the tenant security role,

abTenantAdmin

, to the group who will administer the tenant context on the Process Server and will deploy contributions from Process Developer. This role gives an authenticated administrative user access to tenant-related pages of the Process Console and the authorization to deploy contributions into the tenant context.

In addition, users who will instantiate processes must have the

abServiceConsumer

role.

Example Security Role Setup

After the tenant admin role is assigned to user groups, and you set up a tenant, a user with

abTenantAdmin

privileges can log into the tenant context of Process Console as shown in the following example:

http://localhost:8080/activevos/tenant101

Note that access to

http://localhost:8080/activevos

is denied to any user who does not have the

abAdmin

role.