1. Security Management on IBM Dynamic Workload Console
IBM Workload Scheduler
9.3 FP2
Security Management on IBM Dynamic Workload Console
IBM

2. Tim, the IBM Workload Scheduler administrator
“As an IBM Workload Scheduler administrator, I want to grant fine-tuned access control using a simple interface”
~Tim, IBM Workload Scheduler Administrator
“I don’t want to change the security too often, that’s dangerous” “I use a prefix to identify groups of jobs and job streams. For each group I need someone who has read-write access, and someone else who has read-only access.”
Quote - interview

3. Tim’s job today
Today, Tim needs to add a new sub team to the scheduler team. Tim assigns a prefix to the new team, «AS». All the job streams created by this team will start with «AS» so that he can easily identify them.

4. Tim’s job today The new team has two people:
John, who defines the workload
Margaret, who can only monitor the workload. Margaret must not have access to any job details because she works for a third party company.

5. Tim’s job today
Let’s see how Tim can do his job quicky by using the new Role-based security (Live Demo)

6. Backup charts

7. Dynamic workload console
Tim logs in into the DWC: All the security task are arranged in a single page.

8. Dynamic workload console
He creates a security domain...

9. Dynamic workload console
For all the object starting with «AS»

10. Dynamic workload console
Now he starts granting access to John

11. Dynamic workload console
For John, he reuses the «DEVELOPER» role, he has already defined.

12. Dynamic workload console
And selects the previously created domain «IT_PAYROLL».
The console suggests what are the roles the that John needs to have in the DWC!

13. Dynamic workload console
Now he starts granting access to Margaret

14. Dynamic workload console
For Margareth, he cannot reuse the «OPERATOR» role, because Margareth is not allowed to see job details.. So he duplicates it...

15. Dynamic workload console
He switches to «List» the level of access to workload object

16. Dynamic workload console
.. and checks all other permissions ...

17. Dynamic workload console
For Margareth, now he only needs to give the role in the standard DWC view.

18. Tim has finished his job today!
Well done!
Tim has finished his job today!