iXp User can not see jobs from Autosys instance
Article ID: 279150
Updated On:
Products
Issue/Introduction
We have an Autosys instance in which we need a new set of users in iXp to be able to view and interact with.
Our Autosys is using EEM Authentication.
What do we need to do to set this up.
Environment
Autosys 12.X
EEM 12.X
IXP 11.4.X
Cause
The user that runs the Apache Tomcat service that the iXp is deployed into must have FULL admin rights in the Autosys instance
Resolution
An iXp Server is deployed into an Apache Tomcat instance. The iXp GUI's are Java Applets which run within a desktop/laptop browser.
Per the installation instructions, the Apache Tomcat service MUST be run by an OS user with FULL admin privileges on the Workload Automation side when EEM is in use.
https://techdocs.broadcom.com/us/en/ca-enterprise-software/intelligent-automation/ca-workload-automation-ixp/11-4-00/installing/install-the-ixp-server.html
-
If the Unicenter AutoSys JM or CA Workload Automation AE instances are enabled with CA EEM,
the Tomcat user must be defined in CA EEM with full privileges to all resources within each resource class related to those instances.
This allows two things to happen
1) it allows the iXp Server to go out to the Autosys Instance and read in all of the objects
2) it allows the iXp User's requests to be proxied to Autosys and run under the Service user account with full privileges.
Note: this is what allows you to set up permissions ONLY on the iXp Server side.
Additional Information
Steps to set up new user
1) Make sure the Tomcat User that runs the Service has full permissions in EEM
2) Setup the the Autosys instance in the iXp Admin tool
3) Create a new iXp Group
4) Create the iXp User and assign them to the iXp Group
5) Create a new filtered view to use with this group and assign the iXp Group to the filter
6) Edit the iXp Group to add the permissions required for operations by this group
Feedback
