IBM WebSphere V5.0 Security - CGISecurity

RoleconfiguratoroperatoradministratorDescriptionMonitor privilege plus the ability to changethe WebSphere configuration.Monitor privilege plus the ability to changeruntime state, such as starting or stoppingservices.Operator plus configurator privilege.Note: The Admin roles are effective only when Global Security is enabled.The identity that is specified when enabling Global Security is automaticallymapped to the Administrator role. Therefore, it is not necessary to manually addthis identity to the administrator role.Users and groups, as defined by the user registry, may be mapped toadministrative roles. To enable a new mapping, it is necessary to save thechanges to the master configuration and restart the server. For this reason, it isadvisable to map groups to administrative roles so that users may be added tothe groups appropriately (and hence the users are mapped to administrativeroles) without the need to restart the WebSphere server.Mapping a user to an administrator roleIn order for a user to perform an administrative action, its identity must bemapped to an administrative role.1. From the Administrative Console, click System Administration -> ConsoleUsers.2. Click Add.3. Enter a user name in the User text box. This user must be defined in the userregistry that will be active when Global Security is enabled.4. Select the appropriate administrative role; more than one role may beselected.5. Click OK. If the user cannot be found in the registry, then a error will occur.6. Ensure the new mapping is in the Console Users list.7. Save the change to the master configuration using the link provided at the topof the window and restart the server.240 IBM WebSphere V5.0 Security Handbook