Completing the deployment of a monitor model in a secured queue-based environment

If you are working in a secured environment with a remote CEI and have deployed an IBM® Business Monitor model using the WebSphere® Application Server administrative console or a script, you must perform the additional task of adding a user to the Sender role of the corresponding foreign bus and destination. This task is necessary only if you are using queue-based CEI.

Before you begin

Before you begin this task, you must have deployed a monitor model using the WebSphere Application Server administrative console or a script.

About this task

This topic describes how to add a user to the Sender role of the corresponding foreign bus and destination. You can perform this task from the administrative console or by running a command.

By default, foreign bus resources are not accessible even after you enable security on the enterprise service bus that defined the foreign bus and users (and groups) and after you add them to the service bus connector roles. To give remote CEI Event server access to the foreign bus and foreign destinations created after deploying a model with a remote CEI Event server, you must add the monitor administrative user ID to the Sender role on the remote CEI Event server.

To complete the deployment of the model in a secured environment, complete one of the following procedures to add the user IDs to the Sender roles:

Procedure

Use the administrative console to add the user IDs:
1. To assign the administrative user to the Sender role for the foreign bus, perform the following steps:
  1. From the administrative console, click Service integration > Buses.
  2. On the Buses page, click the Enabled link next to the Monitor bus.
  3. On the Configuration tab, under Authorization Policy, click Manage foreign bus access roles.
  4. Select the Monitor bus, and click Manage Access Roles.
  5. Click Add to open the SIB Security Resource Wizard.
  6. Follow the steps in the SIB Security Resource Wizard to select the user and assign the user to the Sender role.
2. To assign the administrative user to the Sender role for the destination, perform the following steps:
  1. From the administrative console, click Service integration > Buses.
  2. On the Buses page, click the Enabled link next to the Monitor bus.
  3. On the Configuration tab, under Authorization Policy, click Manage destination access roles.
  4. Select the queue to be secured, and click Manage Access Roles.
  5. Click Add to open the SIB Security Resource Wizard.
  6. Follow the steps in the SIB Security Resource Wizard to select the user and assign the user to the Sender role.
Use commands to add the user IDs:
1. On the cell containing the remote CEI Event server, type wsadmin to launch the wsadmin scripting client.
2. Add the administrative user to the sender role for the foreign bus by entering $AdminTask addUserToForeignBusRole { -role Sender -bus BusName -foreignBus ForeignBusName -user username}
  where:
  BusName
  
  is the monitor bus name
  
  ForeignBusName
  
  is the foreign bus name
  
  username
  
  is the administrative user name
3. Add the administrative user to the sender role for the destination by entering $AdminTask addUserToDestinationRole { -type foreignDestination -role Sender -bus BusName -foreignBus ForeignBusName -destination destinationName -user username}
  where:
  BusName
  
  is the monitor bus name
  
  ForeignBusName
  
  is the foreign bus name
  
  destinationName
  
  is the queue destination name for the model. To find this name, in the administrative console on the remote CEI server, select Service Integration > Buses > MONITOR.[cell_name].Bus > Destinations. The name is of the format wbm_modelname_version_Q_Destination.
  
  username
  
  is the administrative user name
4. To save the configuration, enter $AdminConfig save.
5. To close the wsadmin prompt, type exit.
The following example uses Jacl to complete the deployment of a monitor model named StockTradeBPELBRHTM.
```
$AdminTask addUserToDestinationRole { -type foreignDestination -role Sender -bus MONITOR.lc2d266018Node01Cell.Bus -foreignBus MONITOR.lc2d266036Cell01.Bus -destination wbm_StockTradeBPELBRHTM_20080319131516_Q_Destination -user wpsadmin }
```