8/10/2019 Security Considerations 8.0.1
1/4
10/14/13 Help - IBM Business Process Manager
pic.dhe.ibm.com/infocenter/dmndhelp/v8r0m1/index.jsp?topic=%2Fcom.ibm.wbpm.main.doc%2Ftopics%2Fcbpm_ibpmarch.html
1/4
IBM Busines s Process Manager, V8.0.1, All platforms>
Securing IBM Busines s Process Manager and
applications> Getting s tarted with security
Security considerations
This section contains information that you need to know when
determining how security will be
implemented in standalone and network deployment environments in
IBM Business Process Manager.
For more information about registries and repositories, see
Selecting a registry or repository.
Table 1. Security considerations for IBM Business Process
Manager
Security consideration
Standalone
environment
Network deployment
environment
User Registry setup The User Registry is
federated across the file
registry and the Process
Center internal User
Registry (which points to
the database). If the User
Registry configuration is
modified, then the newregistry should be
federated with the internal
User Registry. If the user
registry setup is modified,
follow the instructions that
require the new registry to
be pre-populated with out
of the box users.
The user registry is
federated across the file
registry. If the user
registry setup is modified,
follow the instructions that
require the new registry to
be pre-populated with the
internal users.
Management of users and
groups for IBM Business
Process ManagerAdvanced
Internal users and
groups:Internal users and
groups are managedthrough the Process
Admin Console.
User-defined users and
groups:With the out of
the box user registry
setup, users can be
created using the Process
Admin Console or the
WebSphere Application
Server administrative
console. Note thefollowing considerations:
Users and groups
created in the
Process Admin
Console are stored
in the internal User
Registry whereas
those created in
the WebSphere
Application Server
administrativeconsole are stored
in the file registry.
When users and
groups are
synchronized in the
Internal users and
groups:Internal users are
managed through theWebSphere Application
Server administrative
console, while internal
groups are managed
through the Process
Admin Console.
User-defined users and
groups:Users and groups
are managed using the
WebSphere Application
Server administrativeconsole.
http://pic.dhe.ibm.com/infocenter/dmndhelp/v8r0m1/topic/com.ibm.wbpm.admin.doc/topics/welcome_wps_sec.htmlhttp://publib.boulder.ibm.com/infocenter/wasinfo/v7r0/topic/com.ibm.websphere.base.doc/info/aes/ae/tsec_useregistry.htmlhttp://publib.boulder.ibm.com/infocenter/wasinfo/v7r0/topic/com.ibm.websphere.base.doc/info/aes/ae/tsec_useregistry.htmlhttp://pic.dhe.ibm.com/infocenter/dmndhelp/v8r0m1/topic/com.ibm.wbpm.admin.doc/topics/csec_gettingstarted.htmlhttp://pic.dhe.ibm.com/infocenter/dmndhelp/v8r0m1/topic/com.ibm.wbpm.admin.doc/topics/welcome_wps_sec.htmlhttp://pic.dhe.ibm.com/infocenter/dmndhelp/v8r0m1/topic/com.ibm.wbpm.main.doc/ic-homepage-bpm.html
8/10/2019 Security Considerations 8.0.1
3/4
10/14/13 Help - IBM Business Process Manager
pic.dhe.ibm.com/infocenter/dmndhelp/v8r0m1/index.jsp?topic=%2Fcom.ibm.wbpm.main.doc%2Ftopics%2Fcbpm_ibpmarch.html
3/4
a m n strat ve
console.
These users cannot
be added as
members to the
groups of the file
registry. The
groups in the
internal User
Registry are notvisible to the
WebSphere
Application Server
administrative
console.
Management of users and
groups for IBM Business
Process Manager
Standard
Internal users and
groups:The internal users
and groups are managed
through the Process
Admin Console. Note thefollowing considerations:
User-defined users and
groups:User-defined
users and groups
managed using the
Process Admin Console.
Users and groups
created in the
Process Admin
Console are stored
in the internal UserRegistry.
You can grant
administrative
access to IBM
Business Process
Manager by adding
pre-existing groups
of users from your
external User
Registry to
tw_admins, which
is the IBM BPM
security group
whose members
have administrative
access to IBM
BPM by default.
When changes are
required, you can
simply add or
remove individual
users from the
groups that exist inyour external User
Registry. This
practice ensures
that the security
maintenance you
Internal users and
groups:Internal users are
managed through the
WebSphere Application
Server administrativeconsole, while internal
groups are managed
through the Process
Admin Console.
User-defined users and
groups:Users and groups
are managed using the
WebSphere Application
Server administrative
console.
