Predefined Ensemble Resources

This section describes the Ensemble predefined resources, which all begin with the %Ens_ prefix.

The first subsection lists resources that protect a specific activity you can perform in Ensemble.
The second subsection lists Ensemble code and data resources.

You can view the list of predefined Ensemble resources on the Resources page of the Management Portal (select System Administration > Security > Resources from the Home page).

For an in-depth discussion of resources, see “Assets and Resources” in the Caché Security Administration Guide.

Ensemble Resources to Protect Activities

Resource	Description
%Ens_ConfigItemRun	Controls starting and stopping configuration items
%Ens_DTLTest	Grants access to the data transformation testing utility
%Ens_Dashboard	Grants access to the Ensemble Production Monitor
%Ens_Deploy	Grants access to deployment activities
%Ens_DeploymentPkg	Controls the creation of deployment packages
%Ens_EventLog	Grants access to the Event Log
%Ens_MessageContent	Grants access to the contents of messages
%Ens_MessageDiscard	Controls discarding of queued and suspended messages
%Ens_MessageEditResend	Grants access to edit and resend messages
%Ens_MessageHeader	Grants access to message header data
%Ens_MessageResend	Grants access to resend messages
%Ens_MessageResubmit	Controls resubmission of suspended messages
%Ens_MessageSuspend	Controls the manual suspension of messages
%Ens_MessageTrace	Grants access to message trace
%Ens_MsgBank_Dashboard	Grants access to the Enterprise Monitor Page
%Ens_MsgBank_EventLog	Grants access to the Message Bank Event Log
%Ens_MsgBank_MessageContent	Grants access to the contents of messages in the Message Bank
%Ens_MsgBank_MessageEditResend	Grants permission to edit and resend messages from the Message Bank
%Ens_MsgBank_MessageHeader	Grants access to Message Bank header data
%Ens_MsgBank_MessageResend	Grants permission to resend messages from the Message Bank
%Ens_MsgBank_MessageTrace	Grants access to the Message Bank Visual Trace
%Ens_Portal*	Grants access to the Ensemble menus in the Management Portal
%Ens_ProductionDocumentation	Controls the creation of production documentation
%Ens_ProductionRun	Controls starting and stopping productions
%Ens_Purge	Controls purging of Ensemble data
%Ens_RuleLog	Grants access to the rule log
%Ens_TestingService	Grants access to the business host testing service
%Ens_ViewFileSystem	Grants access to the Finder Dialog which allows the user to view the file system

Note:

* In addition to the %Ens_Portal resource, access to Ensemble functions in the Management Portal in any given namespace requires the Read permission on the default global database resource for that namespace. This check is enforced for access to all Ensemble portal pages.

Ensemble Resources to Protect Code and Data

Resource	Code/Data
%Ens._AlertAdministration	Grants access to managed alert administration.
%Ens_Alerts	Grants access to alert configuration and management
%Ens_ArchiveManager	Grants access to the Archive Manager
%Ens_BPL	Grants access to BPL
%Ens_BusinessRules	Grants access to business rules
%Ens_Code	Grants access to all Ensemble classes and routines
%Ens_Credentials	Grants access to Ensemble credentials
%Ens_DTL	Grants access to DTL
%Ens_EDISchema	Grants access to EDI schemas
%Ens_EDISchemaAnnotation	Grants access to the HL7 Annotation classes.
%Ens_Jobs	Grants access to job data
%Ens_LookupTables	Grants access to lookup tables
%Ens_MsgBank	Grants access to Message Bank status information
%Ens_MsgBankConfig	Grants access to Message Bank configuration
%Ens_ProductionConfig	Grants access to production configuration activities
%Ens_PurgeSchedule	Grants access to scheduling of Ensemble purge tasks
%Ens_Queues	Grants access to queue data
%Ens_RecordMap	Grants access to Ensemble record maps
%Ens_RoutingRules	Grants access to routing rules
%Ens_Rules	Grants access to all Ensemble rules
%Ens_SequenceManager	Grants access to the Sequence Manager
%Ens_SystemDefaultConfig	Grants access to system default settings
%Ens_WorkflowConfig	Grants access to workflow roles and users

Note:

In many cases, Ensemble default behavior uses a less granular resource (like %Ens_Code) which protects multiple data sources including the data protected by a more specific resource (like %Ens_BPL). The predefined Ensemble roles and privileges use the less granular resource, but you can choose alternative roles with more selective privileges.