Chapter 3. Red Hat Decision Manager roles and users
To access Business Central or Decision Server, you must create users and assign them appropriate roles before the servers are started. This section describes available Red Hat Decision Manager user roles.
The admin
, analyst
, and rest-all
roles are reserved for Business Central. The kie-server
role is reserved for Decision Server. For this reason, the available roles can differ depending on whether Business Central, Decision Server, or both are installed.
-
admin
: Users with theadmin
role are the Business Central administrators. They can manage users and create, clone, and manage the repositories. They have full access to make required changes in the application. Users with theadmin
role have access to all areas within Red Hat Decision Manager. -
analyst
: Users with theanalyst
role have access to all high-level features. They can model projects. However, these users cannot add contributors to spaces or delete spaces in the Design → Projects view. Access to the Deploy → Execution Servers view, which is intended for administrators, is not available to users with theanalyst
role. However, the Deploy button is available to these users when they access the Library perspective. -
rest-all
: Users with therest-all
role can access Business Central REST capabilities. -
kie-server
: Users with thekie-server
role can access Decision Server (KIE Server) REST capabilities. This role is mandatory for users to have access to Manage and Track views in Business Central.
3.1. Adding Red Hat Decision Manager users
Before you can use RH-SSO to authenticate Business Central or Decision Server, you must add users to the realm that you created. To add new users and assign them a role to access Red Hat Decision Manager, complete the following steps:
- Log in to the RH-SSO Admin Console and open the realm that you want to add a user to.
Click the Users menu item under the Manage section.
An empty user list appears on the Users page.
Click the Add User button on the empty user list to start creating your new user.
The Add User page opens.
- On the Add User page, enter the user information and click Save.
- Click the Credentials tab and create a password.
Assign the new user one of the roles that allows access to Red Hat Decision Manager. For example, assign the
admin
role to access Business Central or assign thekie-server
role to access Decision Server.NoteFor projects that deploy from Business Central on OpenShift, create an RH-SSO user called
mavenuser
without any role assigned, then add this user to theBUSINESS_CENTRAL_MAVEN_USERNAME
andBUSINESS_CENTRAL_MAVEN_PASSWORD
in your OpenShift template.- Define the roles as realm roles in the Realm Roles tab under the Roles section.
- Click the Role Mappings tab on the Users page to assign roles.