...
This section explains in detail how the management console of a WSO2 product can be used for configuring the permissions granted to a user role. You will also find below, detailed descriptions on all the types of permissions that can be granted.
...
- Click Users and Roles in the Configure tab of the navigator. All the roles created in the system will be listed in the Roles page as shown below.
Click Permissions to open the permissions navigator for the role as shown below.
Note that there may be other categories of permissions enabled for a WSO2 product, depending on the type of features that are installed in the product. - You can select the relevant check boxes to enable the required permissions for your role. The descriptions of all the available permissions are explained below.
...
| Info |
|---|
Note that when you select a node in the Permissions navigator, all the subordinate permissions that are listed under the selected node are also automatically enabled. |
...
Permissions for configuring the server
The following table explains the permissions required for performing various configuration tasks in the WSO2 MBDSS.
| Permission level | Description of UI menus enabled |
|---|---|
| Admin/Configure | When the Admin/Configure permission node is selected, the following menus are enabled in the Management Console: This permission enables the user to Add/Edit/Remove data sources. Theme: This permission is not applicable to MBWSO2 DSS. - Additionally, all permissions listed under Configure in the permissions navigator are selected automatically. |
| Admin/Configure/Security | When the Admin/Configure/Security permission node is selected, the following menus are enabled in the Configure menu of the Management Console: - Keystores: See the topic on managing keystores for information. - This permission will also enable the Roles option under Configure/Users and Roles. See the topic on configuring users, roles and permissions for more information. - Additionally, all permissions listed under Security in the permissions navigator are selected automatically. |
| Admin/Configure/Security/Identity Management/User Management | This permission enables the possibility to add users from the Management Console. That is, the Users option will be enabled under Configure/Users and Roles. |
| Admin/Configure/Security/Identity Management/Profile Management | This permissions enables the profiles of all the users. You can view the profile in the Configure tab, Users and Roles -> Users link. |
| Admin/Configure/Security/Identity Management/Password Management | This permission enables the Change Password option for the users listed in the User Management/Users and Roles/Users screen, which allows the log in user to change the passwords. |
Permissions for managing the server
Listed below are the permissions for some of the general functions applicable to WSO2 DSS.
| Permission level | Description of UI menus enabled | ||||||
|---|---|---|---|---|---|---|---|
| Admin/Manage/Add | - Manage menu/Add/Modules: This permission enables the Cassandra Keyspaces menu under the Main navigator menu. This option allows users to add and manage keyspaces in a Cassandra clusteryou to upload modules using the management console. - Manage menu/Add/Services: This permission enables you to upload/generate/create/schedule services in WSO2 DSS. - Manage menu/Add/Webapps: This permission is not applicable to WSO2 DSS. | ||||||
| Add/Manage/Extensions | - Manage menu/Extensions/List: This permission is not applicable to WSO2 DSS. - Manage menu/Extensions/Add: This permission is not applicable to WSO2 DSS. | ||||||
| Add/Manage/Configure | - Manage menu/Configure/Modules: This permission enables listing of the modules. - Manage menu/Configure/Services: This permission enables listing of the services. - Manage menu/Configure/Webapps: This permission is not applicable to WSO2 DSS. | ||||||
| This permission enables the Browse option under the Registry menu in the main navigator. This option allows users to browse the resources stored in the registry by using the Registry tree navigator. | ||||||
| Admin/Manage/Search | This permission enables the Search option under the Registry sub menu in the Main menu. This option allows users to search for specific resources stored in the registry by filling in the search criteria. | ||||||
| Add/Manage/Topic |
Permissions for monitoring the server
| Permission level | Description of UI menus enabled |
|---|---|
| Admin/Monitor/Logs | When this node is selected, the following menus are enabled in the Monitor tab of the Management Console: - Monitor menu/System Logs: See the topic on system logs for information on how to use this option. - Monitor menu/Application Logs: See the topic on application logs for information on how to use this option. |
| Admin/Monitor/Tenant Usage |