Try OpenEdge Now
skip to main content
Business Process Portal Administrator's Guide
Managing access control : Working with permissions : Administration permissions
 

Administration permissions

This section explains various administration permissions and scope.

Abbreviations

The abbreviations for the component options used in the Administration permissions are as follows:
*adm: Administration
*app: Application
*bs: BPM Webflow
*sbm: BP Server Applications
*exe: Execute
*mod: Business Process Modeler
*conf: Configuration
*que: Queue
*addmem: Add Member
*remmem: Remove Member
*rc: Reusable Components
*imp: Import
*exp: Export
*del: Delete
*log: Log File
*serv: Server
*viewstat: View Status
*grp: Group
*chrole: Change Role
*usr: User
*perm: Permission

Scope of a Permission

In the case of resources such as application, the options include "Any" and the list of applications. If you select Any while creating a permission, then the scope of that permission is across all applications; whereas if you select a particular application, then the scope of that permission is limited only to the selected application. For example, the permission adm_app_install_any_any allows you to install any of the existing Web or Business Process Server applications, but adm_app_install_any_<specific_app> allows you to install only the selected application. The following table lists only the permissions with "Any" option, wherever applicable; you may select a specific entity instead of Any to limit the scope.
Table 57. Administration permissions and their usage
Permission
Pre-requisite
Usage
adm_app_any_any_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > ApplicationsYou can perform any action on any Web or Business Process Server application.
adm_app_any_bs_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can perform any action on any Web application.
adm_app_any_sbm_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can perform any action on any Business Process Server application.
adm_app_exe_any_any
Not supported because execute action is available only for Web applications.
Not applicable.
adm_app_exe_bs_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can execute any Web application.
adm_app_exe_sbm_any
Not supported because execute action is available only for Web applications.
Not applicable.
adm_app_install_any_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can install any Web or Business Process Server application.
adm_app_install_bs_any
Permissions: Business Process Portal Configuration:Administration > Applications
Administration > ApplicationsYou can install any Web application.
adm_app_install_sbm_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can install any Business Process Server application.
adm_app_uninstall_any_any
Permissions: Business Process Portal Configuration:Administration > Applications
Administration > Applications You can uninstall any Web or Business Process Server application.
adm_app_uninstall_bs_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can uninstall any Web application.
adm_app_uninstall_sbm_any
Permissions: Business Process Portal Configuration:Administration > Applications
Administration > Applications You can uninstall any Business Process Server application.
adm_app_suspend_any_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can suspend any Web or Business Process Server application.
adm_app_suspend_sbm_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can suspend any Business Process Server application.
adm_app_resume_any_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can resume any suspended Web or Business Process Server application.
adm_app_resume_sbm_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can resume any suspended Business Process Server application.
adm_app_publish_any_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can publish any Web or Business Process Server application.
adm_app_publish_bs_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can publish any Web application.
adm_app_publish_sbm_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can publish any Business Process Server application.
adm_app_unpublish_any_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can unpublish any published Web or Business Process Server application.
adm_app_unpublish_bs_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can unpublish any published Web application.
adm_app_unpublish_sbm_any
Permissions: Business Process Portal Configuration: Administration > Applications
Administration > Applications You can unpublish any published Business Process Server application.
adm_mod_any_any
Permissions: ---Business Process Portal Configuration: ---
You can create or update a model using the Business Process Modeler and view or delete a model using the Process Repository Admin.
adm_mod_create_any
Permissions: ---Business Process Portal Configuration: ---
You can create a model using the Business Process Modeler.
adm_mod_create_<specific_mod>
Permissions: ---Business Process Portal Configuration: ---
It is recommended that you should use the "adm_mod_create_any" permission instead of this one.
adm_mod_view_any
Permissions: ---Business Process Portal Configuration: ---
You can view the summary of any model using the Process Repository Admin.
adm_mod_update_any
Permissions: ---Business Process Portal Configuration: ---
You can update any model using the Business Process Modeler.
adm_mod_remove_any
Permissions: ---Business Process Portal Configuration: ---
You can remove any model using the Process Repository Admin.
adm_conf_any_any
Permissions: ---Business Process Portal Configuration: Administration > System
Administration > System You can view or update any configuration file.
adm_conf_view_any
Permissions: ---Portal Configuration: Administration > System
Administration > System You can only view any configuration file.
adm_conf_update_any
Permissions: adm_conf_view_any Business Process Portal Configuration:Administration > System
Administration > System You can update any configuration file.
adm_que_any_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management You can create, update, remove, add a member and remove a member from a queue.
adm_que_create_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management You can create any queue.
adm_que_remove_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management You can remove any queue.
adm_que_addmem_any
Permissions: Business Process Portal Configuration:Administration > User Management
Administration > User Management You can add a member in any queue.
adm_que_remmem_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management You can remove a member from any queue.
adm_que_update_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management You can update any queue.
adm_que_view_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management You can view any queue.
adm_rc_any
Permissions: ---Business Process Portal Configuration: ---
You can import, export or delete a reusable component.
adm_rc_imp
Permissions: ---Business Process Portal Configuration: ---
You can only import a reusable component.
adm_rc_exp
Permissions: ---Business Process Portal Configuration: ---
You can only export a reusable component.
adm_rc_del
Permissions: ---Business Process Portal Configuration: ---
You can only delete a reusable component.
adm_log_any_any
Permissions: ---Business Process Portal Configuration: Administration > System
Administration > System > Log Viewer You can view the log file of any Business Process Server component.
adm_log_view_any
Permissions: ---Business Process Portal Configuration: Administration > System
Administration > System > Log ViewerYou can view the log file of any Business Process Server component.
adm_serv_any_any
Permissions: Business Process Portal Configuration: Administration > System
Administration > System > Status You can start, stop, suspend, resume or view status of any of the server from Archiver, BP Server, BPM Events, or EventPublisher.
adm_serv_start_any
Permissions: adm_serv_viewstat_any Business Process Portal Configuration: Administration > System
Administration > System > Status You can start any of the server from Archiver, BP Server, BPM Events, or EventPublisher.
adm_serv_stop_any
Permissions: adm_serv_viewstat_any Business Process Portal Configuration: Administration > System
Administration > System > Status You can stop any of the server from Archiver, BP Server, BPM Events, or EventPublisher.
adm_serv_viewstat_any
Permissions: Business Process Portal Configuration: Administration > System
Administration > System > StatusYou can view status of any of the server from Archiver, BP Server, BPM Events or EventPublisher.
adm_grp_any_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management > Groups You can create, update, remove a group, add a member to a group, remove a member from a group or change the role of a member.
adm_grp_create_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management > Groups You can create a group.
adm_grp_remove_any
Permissions: Business Process Portal Configuration:Administration > User Management
Administration > User Management > GroupsYou can remove any group.
adm_grp_addmem_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management > GroupsYou can add a member to any group.
adm_grp_remmem_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management > GroupsYou can remove a member from any group.
adm_grp_chrole_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management > GroupsYou can change the role of any member.
adm_grp_update_any
Permissions: adm_grp_view_any Business Process Portal Configuration: Administration > User Management
Administration > User Management > Groups You can update any group.
adm_usr_any_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management > Users You can create, remove, update a user or specify delegate settings for any user.
adm_usr_create_any
Permissions: Business Process Portal Configuration:Administration > User Management
Administration > User Management > UsersYou can create a user.
adm_usr_remove_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management > Users You can remove any user.
adm_usr_update_any
Permissions: adm_usr_view_any Business Process Portal Configuration: Administration > User Management
Administration > User Management > Users You can update any user.
adm_usr_view_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management > Users You can view any user.
adm_usr_delegate_any
Permissions: adm_usr_view_any Business Process Portal Configuration: Administration > User Management
Administration > User Management > Users You can specify delegate settings for any user.
adm_perm_any_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management > Permissions You can view, create or remove permissions.
adm_perm_view_any
Permissions: Business Process Portal Configuration: Administration > User Management
Administration > User Management > PermissionsYou can only view permissions.
adm_perm_create_any
Permissions: Business Process Portal Configuration:Administration > User Management
Administration > User Management > Permissions You can create permissions.
adm_perm_remove_any
Permissions: Business Process Portal Configuration:Administration > User Management
Administration > User Management > Permissions You can remove any permissions.
Example
adm_serv_any_any
Let us assume that the administrator "admin" wants to grant the permission to a user "user4" to perform any operation on any server. To access the servers, the user needs access to the Administration > System menu option. The administrator grants the permission and access to the menu option using the User Details page.
The user can now login in Business Process Portal and click Administration > System > Status to open the Report List page. As the user "user4" has permission to perform any operation, he/she can start, stop, suspend, resume or view status of any of the Archiver, BP Server, BPM Events or EventPublisher servers.