WebSphere Application Server V7.0: Concepts ... - IBM Redbooks

9.2 Administrative security
We suggest enabling administrative security to prevent unauthorized access to
the administrative tasks. Enabling administrative security only secures
administration tasks, not applications.
After administrative security is enabled, there is a security check when the
Integrated Solutions Console or other adminstrative facilities are accessed. The
security check makes sure that the accessing user is authenticated and has
been mapped to one of the console security roles. Depending on the console
role to which the user is mapped, different functions will be available.
Proper planning for system management includes identifying the people who will
need access as well as the level of access to the administrative tools. You will
need to consider and design a set of groups, users, and roles that fit your needs.
You should review the available roles and access levels in the WebSphere
Application Server Information Center, at the following Web page:
http://publib.boulder.ibm.com/infocenter/wasinfo/v7r0/topic/com.ibm.web
sphere.nd.doc/info/ae/ae/csec_globalserver.html
WebSphere Application Server gives you the option to enable administrative
security during profile creation. If you choose this option during profile creation,
you will be asked to provide a user ID and password that will be stored in a set of
XML files and be mapped to the Administrator role. Additional users can be
added after profile creation using the administrative tools.
9.3 WebSphere administration facilities
WebSphere Application Server V7.0 provides a variety of administrative tools for
configuring and managing your runtime environment, as follows:
► Integrated Solutions Console
The Integrated Solutions Console is a browser-based client that uses a Web
application running in the Web container to administer WebSphere
Application Server.
► WebSphere scripting client (wsadmin)
The wsadmin client is a non-graphical scripting interface that can be used to
administer WebSphere Application Server from a command line prompt.
314 WebSphere Application Server V7.0: Concepts, Planning, and Design