Defining RunAs roles user assignments for system applications

The bpmModifyMapRunAsRole script provides a way to define the RunAs roles user assignments for the system applications that are shipped with the IBM® Business Process Manager product.

About this task

IBM Business Process Manager provides the following applications that contain users that are mapped to the RunAs roles:
  • IBM_BPM_PerformanceDW_supportDeploymentTarget
  • IBM_BPM_Teamworks_applicationDeploymentTarget
  • BPEContainer__applicationDeploymentTarget
  • TaskContainer__applicationDeploymentTarget
Where the suffix is either the application cluster or the stand-alone server (for IBM Business Process Manager Express® and IBM Integration Designer's Unit Test Environment (UTE)), and the support cluster or stand-alone server: _clusterName or _nodeName_serverName.
For more information on RunAs roles, see Assigning users to RunAs.
Note: The bpmModifyMapRunAsRole script is used to update the IBM_BPM_Teamworks*.ear and IBM_BPM_PerformanceDW*.ear applications. It does not update other IBM Business Process Manager applications.
To define the RunAs roles user assignments, run the bpmModifyMapRunAsRole script, which is located at install_root/util/Security/bpmModifyMapRunAsRole.py.
  • Standalone environment
    wsadmin -username WAS_admin -password WAS_admin_password -f bpmModifyMapRunAsRole.py -usr user -pwd pwd -nodeName node -serverName server -applicationName appName

    where

    WAS_admin is the administrative user name

    WAS_admin_password is the administrative password

    user is the user to be set for the RunAs roles

    pwd is the pwd to be set for the RunAs roles

    node is the name of the node

    server is the name of the server

    appName is the name of the application

  • Clustered environment
    wsadmin -username WAS_admin -password WAS_admin_password -f bpmModifyMapRunAsRole.py -usr user -pwd pwd -clusterName cluster -applicationName appName

    where

    WAS_admin is the administrative user name

    WAS_admin_password is the administrative password

    user is the user to be set for the RunAs roles

    pwd is the pwd to be set for the RunAs roles

    cluster is the name of the cluster

    appName is the name of the application