Administer Basic CA EEM Security › Determine Process for Achieving Role-Based Access

Determine Process for Achieving Role-Based Access

Security administration with CA EEM varies for the following scenarios:

• New or upgrade installation with a referenced directory server: You have configured CA EEM such that authentication is based on credentials that are loaded into CA EEM as global user accounts from an external user store. You are ready to assign an application group to each global user that reflects the role performed in CA Process Automation.
• New installation with a local CA EEM: You are ready to define CA Process Automation users in CA EEM.
• Upgrade installation, where you previously used CA EEM: You can update user accounts for users who design processes or who use processes transitioned to the production environment. Open each account and select one of the new application groups: Designers or Production Users.
• Upgrade installation, where you previously used Microsoft Active Directory or similar LDAP server. You are ready to create user accounts of your existing users in CA EEM. You can either assign a default group to users or you can create custom groups that permit you to retain the roles you used with AD.

  

  Based on your result of the decision chart, see the appropriate section:

• Manage access for referenced user accounts.
• Create user accounts with default roles.
• Update user accounts with default roles.
• Create user accounts with custom AD roles.

  See How to Transition Roles Used in Active Directory to CA EEM.