Restricting installation access to runtime servers

In order to install a snapshot on an online process server (a runtime server), you must have the appropriate access to the process application. Access requirements vary depending on whether the runtime server is in a development, non-production, or production environment. If you need to restrict installation access further, edit the 100Custom.xml file.

Before you begin

You must log in to the Process Admin Console.

The 100Custom.xml must exist. See The 99Local.xml and 100Custom.xml configuration files.

About this task

By default, the following access to the process application is required for each type of environment:
Important: If you restrict access as described in the following procedure, a user must be a member of process-center-install-group in addition to having administrative permission (membership in the tw_admins group). For example, to install to a process server in a production environment, a user must have administrative access to the process application that is being installed and must also be a member of process-center-install-group.
Note: On a process server, for new snapshots that are related to a process application or toolkit with existing snapshots, there are additional restrictions for offline installations. The user must be the one that created the first snapshot for the process application or toolkit, a member of the tw_admins group, or the configured BPMAuthor user for the process server.

Procedure

To restrict installation access, perform the following steps.

  1. Access the host of the online IBM® Business Process Manager Process Server that you want to configure.
  2. Stop the IBM Process Server.
  3. Open the PROFILE_HOME\config\cells\cell_name\nodes\node_name\servers\server_name\process-server\config\100Custom.xml file with a text editor.
  4. Add the following property to the <server> tag in the 100Custom.xml file:

    <process-center-install-group>group_name</process-center-install-group>

    The group_name variable represents the group of users to whom you want to grant this access. You can use an existing group or create a new one. If you create a new group, ensure it also exists on the Process Center Server.
  5. Start the IBM Process Server.

Example

In the following example, the edited 100Custom.xml file grants installation access to the group named Install_Group_A.
<properties>
	<server merge="mergeChildren">
		<process-center-install-group>Install_Group_A</process-center-install-group>
	</server>
</properties>