Use the Administrative Group Roles page to give groups specific authority to administer application servers through tools such as the administrative console or wsadmin scripting. The authority requirements are only effective when administrative security is enabled. Use the Common Object Request Broker Architecture (CORBA) naming service groups page to manage CORBA Naming Service groups settings.
To view the CORBA naming service groups administrative console page, click Environment > Naming > CORBA Naming Service Groups.
Click Refresh All to automatically update the node agent and all of the nodes when a new user is created with the Administrator or Admin Security Manager role. When you click Refresh All, you do not need to manually restart the node agent under an existing Administrator before the new user is recognized with one of these roles. This button automatically invokes the AuthorizationManager refreshAll MBean method. To invoke this method manually, read about Fine-grained administrative security in heterogeneous and single-server environments.
Identifies CORBA naming service groups.
In previous releases of WebSphere Application Server, there were two default groups: ALL AUTHENTICATED and EVERYONE. However, EVERYONE is now the only default group, and it provides CosNamingRead privileges only.
Information | Value |
---|---|
Data type: | String |
Range: | EVERYONE |
Identifies naming service group roles.
A number of naming roles are defined to provide the degrees of authority that are needed to perform certain application server naming service functions. The authorization policy is only enforced when global security is enabled.
Information | Value |
---|---|
Data type: | String |
Range: | CosNamingRead, CosNamingWrite, CosNamingCreate, and CosNamingDelete |
Specifies groups.
The ALL_AUTHENTICATED and the EVERYONE groups can have the following role privileges: Administrator, Configurator, Operator, and Monitor.
Information | Value |
---|---|
Data type: | String |
Range: | ALL_AUTHENTICATED, EVERYONE |
Specifies user roles.
Information | Value |
---|---|
Data type: | String |
Range: | Administrator, Operator, Configurator, Monitor, Deployer and iscadmins |