UME Actions in the Portal 

Use

The User Management Engine (UME) uses UME actions to enforce authorizations. An action is a collection of Java permissions that define which activities a user can perform. UME actions can be assigned to UME roles or portal roles. If a role with a UME action is assigned  to a user, the user gains the authorizations provided by the action.

The User Management Engine verifies that users have the appropriate UME actions assigned to them before granting them access to UME iViews and functions. For a list of the standard actions used by the UME, see Standard UME Actions.

Other applications can also define actions and check for these actions.

In a default portal installation, the following UME actions are in use:

Roles	Assigned UME Actions
Portal Roles
Super Administrator	UME.AclSuperUser UME.Manage_All
User Administrator	UME.Manage_All
Delegated User Administrator	UME.Manage_Users
UME Roles
Administrator	UME.Manage_All

For more information on the above actions, see Standard UME Actions.

Integration

In the portal, you can assign UME actions to portal roles in the Role Editor. Each UME action is listed as a property in the Property Editor for roles and you can set each action to Yes or No. For more information on changing role properties, see Defining and Changing the Properties of Roles and Worksets. By assigning UME actions to portal roles, you change the authorizations of that role.

You can assign more than one action to a role. For example, if you assign the actions UME.Manage_Users and UME.Manage_Groups to a role, users assigned to that role can perform delegated-user-administration tasks such as creating and approving company users and, in addition, can manage groups.

If applications that use UME actions are running in the portal, the UME actions defined by these applications are automatically displayed in the Role Editor as well.

Additional Information

See also Permissions, Actions, and UME Roles.