IBM WebSphere V5.0 Security - CGISecurity

Figure 10-3 Mapping a user to an Administrative role
Mapping a group to an administrator role
As mentioned earlier, it is advisable to map groups to roles rather than users.
Mapping a group is similar to mapping a user.
1. From the Admin Console, click System Administration -> Console Groups
2. Click Add.
3. Either a specific group or a special subject may be mapped.
To map a specific group, enter the group name in the Specify group text box.
This group must be defined in the user registry that will be active when Global
Security is enabled.
To map a special subject, select the Special subject option and the
appropriate subject from the drop-down list. A special subject is a
generalization of a particular class of users. The AllAuthenticated special
subject means that the access check of the admin role ensures that the user
making the request has at least been authenticated. The Everyone special
subject means that anyone, authenticated or not, can perform the action, as if
no security were enabled.
4. Select the appropriate administrative role; more than one role may be
selected.
5. Click OK. If the group cannot be found in the registry, then an error will occur.
6. Ensure the new mapping is in the Console Groups list.
7. Save the change to the master configuration, using the link provided at the
top of the window, and restart the server.
Chapter 10. Administering WebSphere security 241