Role Management

Roles facilitate new user onboarding and user setup in general by allowing you to define sets of permissions for various jobs in your organization. The Role Management page is used to assign features to a built-in role or create a new role and assign features to it.

Built-in roles are listed below:

• Administrator
• Agent
• EMS Admin
• Message Admin
• Message Browser
• Operator
• View Only 

After you have associated a role with permissions, you can assign that role to a user group or, if needed, to an individual user.

You see Show, hide, and rearrange table columns in the Customizing the meshIQ Secure interface for more information about managing columns.

Working with the Role Management table

When you first access the Role Management table, standard roles are represented by columns, and products are represented by rows. 

Understanding indicators

Color indicators quickly show you a quick snapshot of each role's permissions per product and object type, as well as for individual features.

View Mode	Edit Mode	Description
		All permissions are turned on (for a product or object type)
		An individual feature is turned on
		Some permissions are turned on and some are turned off (for a product or object type)
		An individual feature is turned off
		No permissions are turned on (for a product or object type)

Expanding and collapsing products and objects

Expand a product to view its objects.  Expand an object to view individual features.

• In version 11.2, to expand or collapse a product and object, click the Expand/Collapse icon located next to the 'All' column.
  • Click Expand Just Products to enable Expand Just Visible Object Groups.
  • When you start expanding Products and Objects, the Collapse options will be enabled.
       

• In version 11.1 and earlier, to expand a product or object, click the expand button. You can also use the expand options that are above the table:
  

To collapse a product or object, click the collapse button . You can also use the collapse options that are above the table:

Filtering products and objects

A Filter text field is now available to search for specific text on the Role Management page. Rows are filtered as you type.

Expand products to view the relevant objects:

Expand objects to view the individual rights:

Find objects and navigate search results

You can also use the Filter field as a search field.

1. Click the Filter icon once. The label for the icon will change from "Filter" to "Navigate": .
2. Enter a search term in the field provided. Results are found as you type. Search results are highlighted in mustard yellow. The current item is displayed in orange.
3. You can browse search results. Navigate through results using the right and left  arrows.
   As you navigate to each result, product and object groups automatically expand as needed.

Edit permissions

Permissions for features that are common to all products are described in the Common Objects section. Use the links below to learn more about permissions for each product:

• IBM MQ
• Kafka
• TIBCO EMS
• ACE/IIB
• Solace
• RabbitMQ

To edit permissions for any role, product, or object, directly from the Role Management grid, follow these steps:

1. Click Edit Permissions: . You are now in Edit Mode. In Edit Mode, special icons are displayed to allow you to edit permission.  Refer to the table above. 
2. Use the expand  and collapse  buttons to view products and objects.
3. Click a check box to grant permission for a feature. A green check mark is displayed in the check box. To remove permission, click the green check mark. The check mark is removed. Clicking a partial indicator once will assign all permissions, by default, and change the indicator to a green check mark.

Clicking a check box at the product level assigns all permissions for all the product's objects to the role. Similarly, clicking a check box at the object level assigns permissions for all the objects. Removing a check mark at the product or object level removes all of the underlying permissions from the role.

4. After updating permissions, click .

Create a new role

To create a new role:

1. In version 11.2, select Security Manager > Role Management from the left toolbar. 
   In version 11.1 and earlier, select Security Manager > Role Management.
2. Click the add button . The Role Create dialog opens.
3. Enter the Role name in the space provided.
4. Define permissions for the new role within the dialog, following the instructions above in Edit permissions. Pay special attention to the information provided in the tip.
5. Click Save.

Edit a role

To edit a role's name or permissions:

1. Click the role's menu icon (after its name) and select Edit Role. The Role Properties dialog opens. It is identical in functionality to the Role Create dialog. 
2. To edit the name of the role, enter a new name in the Role name field.
3. To edit permissions for the role within the Role Properties dialog, following the instructions above in Edit permissions. 
4. Click Save.

Clone a role

In version 11.2, the word 'Clone' has been changed to 'Duplicate,' but the functions remain the same as 'Clone',

To save time when setting up a new role, you can base it on the permissions of an existing role. Use the Clone option to do this.

To clone a role:

1. Click the role's menu icon (after its name) and select Clone Role. The Role Clone Window opens. The Role Clone Window is identical in functionality to the Role Create dialog. 
2. Enter the name of the new role in the Role name field.
3. To edit permissions for the new role within the Role Clone Window, follow the instructions above in Edit permissions. 
4. Click Save. The new role is added as a new column at the end of the table.

Delete a role

To delete a role:

1. Click the role's menu icon (after its name) and select Delete Role. A confirmation message is displayed. 
2. Click Yes to delete the role, or No to cancel.

Export a role's data