Core access management

This page describes organizations, roles and rights that provide access to various data and functions of this module.

For more information, see Authentication and authorization in the BPC.

Organizations, roles and rights are not case-sensitive. For example, the BPC does not differentiate between Rolle1 and ROLLE1.

Roles

bpcNoFrontend: Users who are assigned this role cannot log in to the BPC.
This makes it possible, for example, in the Karaf Identity Provider to maintain dedicated users who have access to the Karaf console but not to the BPC itself.

rights

loadModule_MODULE_ID

This right controls whether a user may use a module. MODULE_ID corresponds to the technical ID of the module, e.g. loadModule_monitor for the monitor module.
The corresponding right must be assigned for each module to be used. If the corresponding right is missing for a module, the user cannot access the configuration (see also Configuration API) of the module. In addition, the web client does not load the corresponding JavaScript code.

The module ID is displayed in the admin area as a tooltip on the corresponding tabs.

useModuleInstance_MODULE_INSTANCE_ID

This right is evaluated if access to instances has been restricted in the module (see Module_RestrictInstanceAccess in Configuration). If access is restricted, the user must have the right to the respective instance in addition to the loadModule_MODULE_ID right in order for the instance to be created.
MODULE_INSTANCE_ID is a placeholder for the specific ID of the instance.

createModuleInstances_MODULE_ID

This right controls whether the user can create instances of a module.
MODULE_ID corresponds to the technical ID of the module, e.g. createModuleInstances_monitor for the monitor module.

deleteModuleInstances_MODULE_ID

This right controls whether the user can delete instances of a module.
MODULE_ID corresponds to the technical ID of the module, e.g. deleteModuleInstances_monitor for the monitor module.

showBpcConfiguration

Allows the display of the administration area Administration area.

loginDuringMaintenanceMode

Authorizes the user to log in while the system is in maintenance mode.

getSessionStatus

This right allows the user to log in via the Status API to read active sessions.
This is also required to use the session overview widget.