Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The following table describes the permissions at Super Tenant level. These are also referred to as Super Admin permissions.

PermissionDescription of UI menus enabled
Configuration permissions:
Image Modified 
The Super Admin/Configuration permissions are used to grant permission to the key functions in a product server, which are common to all the tenants. In each WSO2 product, several configuration permissions will be available depending on the type of features that are installed in the product.

- Feature Management permission ensures that a user can control the features installed in the product using the Management Console. That is, the Features option will be enabled under the Configure menu. See the topic on feature management for more information.
- Logging permission enables the possibility to configure server logging from the Management Console. That is, the Logging option will be enabled under the Configure menu. See the topic on logging management for more information.
Management permissions:Image Modified

The Super Admin/Manage permissions are used for adding new tenants and monitoring them.

- Modify/Tenants permission enables the Add New Tenant option in the Configure menu of the Management Console, which allows users to add new tenants.
- Monitor/Tenants permission enables the View Tenants option in the Configure menu of the Management Console.

See the topic on configuring multiple tenants for more information.

Server Admin permissions:
Image Modified
Selecting the Server Admin permission enables the Shutdown/Restart option in the Main menu of the Management Console.

Tenant-level permissions

The following table describes the permissions at Tenant level. These are also referred to as Admin permissions.

...

The following table explains the permissions required for performing various configuration tasks in the WSO2 MB.

Permission levelDescription of UI menus enabled
Admin/ConfigureWhen the Admin/Configure permission node is selected, the following menus are enabled in the Management Console:

- Configure
menu/Datasources: Not applicable to MB.
- Configure
menu/Server Roles: Not applicable to MB.

- Additionally, all permissions listed under Configure in the permissions navigator are selected automatically.
Admin/Configure/SecurityWhen the Admin/Configure/Security permission node is selected, the following menus are enabled in the Configure menu of the Management Console:

- Keystores: See the topic on managing keystores for information.
- This permission will also enable the Roles option under Configure/Users and Roles.
See the topic on configuring users, roles and permissions for more information.
- Additionally, all permissions listed under Security in the permissions navigator are selected automatically.
Admin/Configure/Security/Identity Management/User ManagementThis permission enables the possibility to add users from the Management Console. That is, the Users option will be enabled under Configure/Users and Roles.
Admin/Configure/Security/Identity Management/Profile ManagementThis permissions enables the profiles of all the users. You can view the profile in the Configure tab, Users and Roles -> Users link.
Admin/Configure/Security/Identity Management/Password ManagementThis permission enables the Change Password option for the users listed in the User Management/Users and Roles/Users screen, which allows the log in user to change the passwords.

Permissions for managing Queues and Topics

...

  • Permissions required for working with /wiki/spaces/MB350/pages/46071941:

    Permission levelDescription of UI menus enabled
    Admin/Queue/Add

    This permission enables the option to Add queues. You will be able to add new queues and view a list of the available queues with this permission. To be able to delete, purge messages to a queue or browse details of a queue, you need the following permissions.

    Note

    Note that a user that has permission to Add new queues, by default obtains permission to consume messages from all queues created by the same user and to publish messages to the same queues.

    Admin/Manage/Queue/BrowseThis permission enables the Browse option for Queues. When you go to the Main tab and click Queues -> List, you will see the Browse link enabled for each queue.
    Admin/Manage/Queue/DeleteThis permission enables the Delete option for Queues. When you go to the Main tab and click Queues -> List, you will see the Delete link enabled for each queue.
    Admin/Manage/Queue/PurgeThis permission enables the Purge Messages option for Queues. When you go to the Main tab and click Queues -> List, you will see the Purge Messages link enabled for each queue.
    Admin/Manage/Dead Letter Channel

    This permission enables users to see any queue information that is stored in the Dead Letter Channel. When this node is selected, the following permissions will be automatically granted:

    • Browse: Allows users to browse details of a queue stored in the Dead Letter Channel.
    • Delete: Allows users to delete any queue stored in the Dead Letter Channel.
    • Reroute: Allows users to reroute a queue stored in the Dead Letter Channel to any other queue chosen by the user.
    • Restore: Allows users to restore a queue stored in the Dead Letter Channel to the queue from which it originated.
  • Permissions required for working with /wiki/spaces/MB350/pages/46071947:

    Permission levelDescription of UI menus enabled
    Admin/Manage/Topic/Add

    This permission enables the possibility of adding topics and sub topics. When you go to the Main tab, the Add option will be enabled Topics, which can be used to add a new topic. When you go to Topics -> List and select a particular topic, the Add Subtopic link will also be enabled.

    Note

    Note that a user that has permission to Add new topics, by default obtains permission to subscribe and publish to all the topics that are created by the same user.

    Admin/Manage/Topic/Delete

    This permission enables the possibility of deleting topics and subtopics. When you go to Topics -> List and select a particular topic, the Delete link will be enabled.

    Note

    Note that the Admin/Manage/Resources/Browse permission node should also be enabled for topic deletion to be allowed.

    Admin/Manage/Topic/DetailsThis permission enables the possibility of checking the details of topics and subtopics. When you go to Topics -> List and select a particular topic, the Details link will be enabled.
  • Listed below are the permissions that will allow users to manage /wiki/spaces/MB350/pages/46071957.

    Permission levelDescription of UI menus enabled
    Admin/Manage/Subscription/QueueThis permission enables the possibility of viewing details of queue subscribers. The Subscription -> Queue Subscription List option will be available in the Main tab.
    Admin/Manage/Subscription/CloseQueueSubscriptionsThis permission in addition to 'Admin/Manage/Subscription/Queue' will allow users to close queue subscriptions.
    Admin/Manage/Subscription/TopicThis permission enables the possibility of viewing details of topic subscribers. The Subscription -> Topic Subscription List option will be available in the Main tab.
    Admin/Manage/Subscription/CloseTopicSubscriptionsThis permission in addition to 'Admin/Manage/Subscription/Topic' will allow users to close topic subscriptions.
Info
titleSubscribing to Topics/Queues

Explained above are the list of role-based permissions that are required by users in order to create and manage queues/topics from the Management Console.

Note

Note that the permission to create topics/queues also includes the permissions for publishing messages to that topic/queue and consuming the messages published to that topic/queue.

Once queues and topics are created in the Management Console, other users should be able to publish to these topics/queues and consume the messages that are published. Therefore, the creator of the topic/queue should grant permissions to other user roles at the time of creating the topic/queue as shown below.

  • When adding a topic from the Management Console, all the available user roles will be listed as shown below. The topic creator can then select the relevant check box to grant the relevant permissions. See the detailed instruction on /wiki/spaces/MB350/pages/46071947.
    Image RemovedImage Added
  • When adding a queue from the Management Console, all the available user roles will be listed as shown below. The queue creator can then select the relevant check box to grant the relevant permissions. See the detailed instruction on /wiki/spaces/MB350/pages/46071941.
    Image RemovedImage Added

General management permissions

Listed below are the permissions for some of the general functions applicable to WSO2 MB. 

Permission levelDescription of UI menus enabled
Admin/Manage/AddThis permission enables the Cassandra Keyspaces menu under the Main navigator menu. This option allows users to add and manage keyspaces in a Cassandra cluster.
Anchor
RegistryBrowsing
RegistryBrowsing
Admin/Manage/Resources/Browse
This permission enables the Browse option under the Registry menu in the main navigator. This option allows users to browse the resources stored in the registry by using the Registry tree navigator.
Admin/Manage/SearchThis permission enables the Search option under the Registry sub menu in the Main menu. This option allows users to search for specific resources stored in the registry by filling in the search criteria.

Permissions for monitoring

Permission levelDescription of UI menus enabled
Admin/Monitor/LogsWhen this node is selected, the following menus are enabled in the Monitor tab of the Management Console:

- Monitor menu/System Logs: See the topic on system logs for information on how to use this option.
- Monitor menu/Application Logs: See the topic on application logs for information on how to use this option. 
Admin/Monitor/Metrics

When this node is selected, the following menus are enabled in Monitor tab of the Management Console:

  • Metrics/JVM Metrics: Used for monitoring system statistics common to all products.
  • Metrics/Messaging Metrics: Used for monitoring MB-specific statistics.