Auditing AutoSys User Permissions Configured via EEM

Products

• Autosys Workload Automation

Issue/Introduction

Auditing user permissions for AutoSys environments can be challenging due to the dynamic and granular nature of how access is controlled.  There is no single, consolidated report that provides a straightforward list of what specific users can or cannot do across all AutoSys components (jobs, calendars, WCC tabs, etc.).  Permissions are managed through policies in Embedded Entitlements Manager (EEM) and are often granted based on a user's group memberships, typically sourced from an integrated LDAP directory.  As users interact with the product, EEM dynamically checks multiple policies to determine if a requested action is allowed, making a comprehensive, static "user permission report" difficult to generate directly. 
 

Environment

* Product: AutoSys Workload Automation 
* Component: Workload Control Center (WCC) 
* Authentication/Authorization: Embedded Entitlements Manager (EEM) 
* External Integration: LDAP (often used for user/group management)

 

Resolution

While a direct, consolidated user permission report is not available, the recommended approach for auditing AutoSys user permissions is to export the relevant EEM application policies. 
This provides a detailed record of the access rules defined within your environment. 
Follow these steps to export the necessary policies for audit purposes: 

1. Access the EEM UI: Log into your EEM user interface with the Application drop down set to WCC0004. 
2. Export WCC0004 Application Policies: 
* In the EEM UI, navigate to Configure > EEM Server > Export Application > Export
3. Repeat Steps 1 and 2 for when the application drop down is set to WorkloadAutomationAE on the EEM login page.

Important Considerations: 
The exported files will contain the raw policy definitions. Your audit team will need to analyze these definitions, potentially in conjunction with your LDAP group structures, to understand the effective permissions for specific users. EEM policies are designed for the product's internal use and are evaluated on demand. The exported policies represent the "rule book" that EEM consults.