Implementing Policy › Security › CA EEM and CA Workflow User Base Configurations › Configure CA Workflow Access in CA EEM

Configure CA Workflow Access in CA EEM

All logins to CA Workflow are authenticated by CA EEM. A person must have a CA EEM user record in order to access the CA Workflow IDE or Worklist application. The CA Workflow administrator, who is specified during CA SDM configuration, has full access.

By default, this user is used by CA SDM for the Workflow integration. This user account is set by the cawf_username and cawf_password Options in Options Manager. You must make sure that the username and password set in these options are correct and the user has full access to CA Workflow resources within CA EEM.

CA Workflow also uses CA EEM to restrict access to specific CA Workflow functions. This access is controlled by two Resources Classes called IDE and Process:

• The IDE resource has a single action named login, which gives login access to the IDE. A user must have permission for this action to login to the CA Workflow IDE application.
• The Process resource has the single action named start, which gives the ability to start a process instance. A user must have permission for this action to start processes from within the Worklist web application.

Note: All users known to CA EEM have access to the CA Workflow Worklist application to view and perform workitem tasks. This permission is only available to start new instances from the Worklist. These resource classes are defined with the CA SDM application instance in CA EEM; when logging into the CA EEM Web user interface, you must specify the CA SDM application instance in order to see the resources, polices and groups discussed here.

Users who need to either login to the IDE or start process instances need an authorization grant to the resources and actions named above. The CA SDM configuration adds two policies to CA EEM that grant access to these resources. For convenience, the policies grant access to two groups in its application instance: Workflow Administrators and Workflow Process Initiators. You can simply add users to the Workflow Administrators group for them to gain access to the IDE. Adding users to the Workflow Process Initiators group allows them to start processes from the Worklist application.

To add or remove users from the groups mentioned above

1. Login to the CA EEM Web UI
2. On the login page, select the CA SDM application and specify the CA EEM administrator name and password.
3. On the main CA EEM page, select Manage Identities.
4. Select Users search, enter the search criteria and perform the search.
5. Select a user in the result list.
6. On the user details display, add or remove group membership in the Application Group Membership section.

   Note: If this section is not displayed, you may need to press the Add Application User Details button.

7. When you have finished, press Save.

   The user is added or removed as applicable.