Security Management on IBM Dynamic Workload Console IBM Workload Scheduler 9.3 FP2 Security Management on IBM Dynamic Workload Console IBM

Tim, the IBM Workload Scheduler administrator “As an IBM Workload Scheduler administrator, I want to grant fine-tuned access control using a simple interface” ~Tim, IBM Workload Scheduler Administrator “I don’t want to change the security too often, that’s dangerous” “I use a prefix to identify groups of jobs and job streams. For each group I need someone who has read-write access, and someone else who has read-only access.” Quote - interview

Tim’s job today Today, Tim needs to add a new sub team to the scheduler team. Tim assigns a prefix to the new team, «AS». All the job streams created by this team will start with «AS» so that he can easily identify them.

Tim’s job today The new team has two people: John, who defines the workload Margaret, who can only monitor the workload. Margaret must not have access to any job details because she works for a third party company.

Tim’s job today Let’s see how Tim can do his job quicky by using the new Role-based security (Live Demo)

Backup charts

Dynamic workload console Tim logs in into the DWC: All the security task are arranged in a single page.

Dynamic workload console He creates a security domain...

Dynamic workload console For all the object starting with «AS»

Dynamic workload console Now he starts granting access to John

Dynamic workload console For John, he reuses the «DEVELOPER» role, he has already defined.

Dynamic workload console And selects the previously created domain «IT_PAYROLL». The console suggests what are the roles the that John needs to have in the DWC!

Dynamic workload console Now he starts granting access to Margaret

Dynamic workload console For Margareth, he cannot reuse the «OPERATOR» role, because Margareth is not allowed to see job details.. So he duplicates it...

Dynamic workload console He switches to «List» the level of access to workload object

Dynamic workload console .. and checks all other permissions ...

Dynamic workload console For Margareth, now he only needs to give the role in the standard DWC view.

Tim has finished his job today! Well done! Tim has finished his job today!