Assigning End-User Permission to FPN Content

Use

Content usage mode: remote role assignment, remote delta link, WSRP application sharing

Applies to: consumers

End-user permissions enable business users to run content at runtime. Just as end users require end-user permission to run local content on its hosting portal, they also need end-user permission for content originating from a remote producer.

This topic describes when to assign end-user permission to an FPN connection, WSRP connection, and to remote-based content created on the consumer portal.

Prerequisites

To use the Manage My FPN Connections tool (for assigning permissions to FPN connections) or the Manage My WSRP Producers tool (for assigning permissions to WSRP producer objects), you are authorized to access the portal role containing the Federated Portal workset.
To use the Permissions editor (for assigning permissions to WSRP producer objects and to content), you are authorized to access the portal role containing the Permissions workset.
To modify the permissions of an FPN connection, you have administrator owner permission for the FPN connection.

Note

If you do not have this authorization, a system administrator can assign your user with the required permission level to either the Remote FPN Producers folder in the Portal Catalog or directly to the corresponding FPN producer semantic object located in this folder. For more information, see Setting Permissions in the Permission Editor .
To modify the permissions of a WSRP producer object, you have administrator owner permission for the object, which is located in the WSRP Content Producers folder in the Portal Catalog.

Note

If you do not have this authorization, a system administrator can assign your user with the required permission level to either the WSRP Content Producers folder in the Portal Catalog or directly to the corresponding WSRP producer semantic object located in this folder.

The WSRP Content Producers folder is accessible only in the Manage My WSRP Producers tool or the Permissions editor.
To modify the permissions of content on your portal, you have administrator owner permission for that content.

You have owner administrator permission.

Procedure

Open the relevant editor or tool on the consumer portal:
- FPN connections : To assign permissions to FPN connections, use the Manage My FPN Connections tool.
- WSRP producer objects : To assign permissions to WSRP producer objects, use the main Permission editor or the Manage My WSRP Producers tool in the portal.
- Portal content objects : To assign permissions to content, use either the main Permission editor in the portal or the Portal Content Studio.

In the respective editor or tool, locate the relevant FPN connection, WSRP producer object, or content object, and then assign end-user permission as follows:

Content usage mode	`End-user permission` to assign to FPN connection	`End-user permission` to assign to WSRP producer object	`End-user permission` to assign to remote-based content
Remote role assignment	Yes	(not applicable) ⁽¹⁾	(not applicable) ⁽²⁾
Remote delta link	Yes	(not applicable) ⁽¹⁾	Yes ⁽³⁾
WSRP application sharing	(not applicable) ⁽⁴⁾	Yes	Yes ⁽⁵⁾

⁽¹⁾ WSRP producer objects only apply to WSRP application sharing usage mode.

⁽²⁾ The portal does not create local content on the consumer when a user administrator makes remote role assignments.

⁽³⁾ Permission is assigned to remote-based local iViews, pages, worksets, and roles on the consumer.

⁽⁴⁾ FPN connections only apply to remote role assignment and remote delta link usage modes.

⁽⁵⁾ Permission is assigned to proxy-to-portlet iViews on the consumer.

Save your changes.

Note

In addition to the end-user permission that is assigned to remote-based content on the consumer, the system administrator on the producer must also assign end-user permission to the corresponding content on the remote producer. In addition, end users require permissions to run the portal components on which remote iViews and pages are based; these portal components are located in security zones on the producer. For more information, see the following:
If an iView on the producer uses a system object to enable access to a back-end system, the system administrator on the producer must assign end-user permission to consumer-based business users in these system objects.