Rule Execution Server users are managed by assigning them to roles that determine security privileges. Role-based security allows system administrators to assign access permissions to users based on their job function rather than on their user identities. This type of security is easier to identify and maintain than user-based security.

Rule Execution Server provides two roles:

To set up user access you need to carry out the following tasks, in the order specified:

Step 1: Set the Role Property

To be able to set up users you need to configure the Management Service configuration property: ILOG.Rules.ExecutionServer.Management.Role.

To set the role property

Step 2: Install the Authorization Manager Store

The Microsoft Authorization Manager (AzMan) is supported on Windows Server 2003, Service Pack 1 (SP1) or later, and Windows XP Professional.

To install AzMan on Windows XP Professional

Step 3: Create an Authorization Store (optional)

Rule Execution Server is delivered with an XML authorization store, which stores properties of the Rule Execution Server user roles. This file is located in <InstallDir>\Bin\Public Assemblies\AuthorizationStore.xml. You can either use this authorization store, or create another one by modifying the Management Service configuration file.

To create your own authorization store

Please refer to the Microsoft documentation for more information about the Authorization Store.

Step 4: Assign Users to a Role

Having set up the user roles, installed Authorization Manager and, if required, created your own authorization store, you can now assign users to the relevant role.

To assign users to a role

The following table summarizes the operations that each role can perform:

See Also