Using ObjectManager to assign or revoke role assignments

An IBM OpenPages® with Watson™ administrator can assign or revoke role assignments using the ObjectManager tool.

Before you begin

This solution assumes that the administrator knows the following items:
  • The system-level folder name of the security domain.
  • The role assignment type of the role template.
  • The role template name.
  • The OpenPages with Watson user name.

About this task

The ObjectManager syntax for revoking or assigning a role assignment is as follows: 
<?xml version="1.0" encoding="UTF-8"?>
<openpagesConfiguration xmlFormatVersion="1.31">
   <roleAssignments>
      <roleAssignment type="{object type}" status="{assign/revoke}">
         <businessUnits>
            <businessUnit name="{path of the security domain}"/>
         </businessUnits>
         <roleActors>
            <roleActor name="{actorname}"/>
         </roleActors>
         <roles>
            <role name="{role template name}"/>
         </roles>
      </roleAssignment>
   </roleAssignments>
</openpagesConfiguration>

Using the following example, an administrator can revoke the user johndoe from the root level security domain.

Procedure

  1. Log on to the application server.
  2. Open a text editor.
  3. Copy the syntax example.
  4. Update the example to reflect the correct role assignment type: whether to assign or revoke the role; the security domain path; name of actor; and the role template name. For example: 
    <?xml version="1.0" encoding="UTF-8"?>
<openpagesConfiguration xmlFormatVersion="1.31">
   <roleAssignments>
      <roleAssignment type="SOXBusEntity" status="revoke">
         <businessUnits>
            <businessUnit name="="/_op_sox/Project/Default/BusinessEntity"/>
         </businessUnits>
         <roleActors>
            <roleActor name="johndoe"/>
         </roleActors>
         <roles>
            <role name="OpenPages Modules 7.0 - All Data - No Admin"/>
         </roles>
      </roleAssignment>
   </roleAssignments>
</openpagesConfiguration>
  5. Save the file using the ObjectManager file name format, such as groupmem-revoke-op-config.xml.
  6. Open a command prompt or shell. Alternatively, you can use Administration menu > System Migration > Import Configuration to import the XML file. For information, see Importing a migration file.
  7. Go to OP_HOME\bin folder.
  8. Run the command to load the ObjectManager file.
    The following extract is the sample output for the working example:
    OpenPages V8.1.0.0 (Build: OP_8.1-270 2019/09/06 14:20:23) 
starting ...
OpenPages Global environment initialized.
==============================
Object Manager Admin Utility V8.1.0.0 
(Build: OP_8.1.0.0-270 2019/09/06 14:20:23)
==============================

List of command line arguments:
	Arg 1: <load>
	Arg 2:  <config>
	Arg 3:  <OpenPagesAdministrator>
	Arg 4:  <****>
	Arg 5:  <C:\temp>
	Arg 6:  <groupmem-revoke>
Total number of arguments: 6
OpenPages Server environment initialized.

Loading OpenPages Configuration (groupmem-revoke) from folder:
	'C:\temp' ...

Processing started at Fri Jun 13 14:00:52 EDT 2014

Loading Role Assignments ...
      1 total

Role Assignments processed: 1
Business Units processed: 1
Role Actors processed: 1
Roles processed: 1

Total Objects processed: 4
Total Validation Errors: 0

Total Exceptions: 0
Processing finished at Fri Jun 13 14:00:58 EDT 2014
Elapsed time: 5703 milliseconds
  9. Restart the OpenPages services. For more information, see Starting and stopping servers.