docs.intersystems.com
Managing Ensemble
Predefined Ensemble Resources
[Home] [Back] [Next]
InterSystems: The power behind what matters   
Search:    

Predefined Ensemble Resources
This section describes the Ensemble predefined resources, which all begin with the %Ens_ prefix.
You can view the list of predefined Ensemble resources on the Resources page of the Management Portal (select System Administration > Security > Resources from the Home page).
For an in-depth discussion of resources, see Assets and Resources in the Caché Security Administration Guide.
Ensemble Resources to Protect Activities
Resource Description
%Ens_ConfigItemRun Controls starting and stopping configuration items
%Ens_DTLTest Grants access to the data transformation testing utility
%Ens_Dashboard Grants access to the Ensemble Production Monitor
%Ens_Deploy Grants access to deployment activities
%Ens_DeploymentPkg Controls the creation of deployment packages
%Ens_EventLog Grants access to the Event Log
%Ens_MessageContent Grants access to the contents of messages
%Ens_MessageDiscard Controls discarding of queued and suspended messages
%Ens_MessageEditResend Grants access to edit and resend messages
%Ens_MessageHeader Grants access to message header data
%Ens_MessageResend Grants access to resend messages
%Ens_MessageResubmit Controls resubmission of suspended messages
%Ens_MessageSuspend Controls the manual suspension of messages
%Ens_MessageTrace Grants access to message trace
%Ens_MsgBank_Dashboard Grants access to the Enterprise Monitor Page
%Ens_MsgBank_EventLog Grants access to the Message Bank Event Log
%Ens_MsgBank_MessageContent Grants access to the contents of messages in the Message Bank
%Ens_MsgBank_MessageEditResend Grants permission to edit and resend messages from the Message Bank
%Ens_MsgBank_MessageHeader Grants access to Message Bank header data
%Ens_MsgBank_MessageResend Grants permission to resend messages from the Message Bank
%Ens_MsgBank_MessageTrace Grants access to the Message Bank Visual Trace
%Ens_Portal* Grants access to the Ensemble menus in the Management Portal
%Ens_ProductionDocumentation Controls the creation of production documentation
%Ens_ProductionRun Controls starting and stopping productions
%Ens_Purge Controls purging of Ensemble data
%Ens_RuleLog Grants access to the rule log
%Ens_TestingService Grants access to the business host testing service
%Ens_ViewFileSystem Grants access to the Finder Dialog which allows the user to view the file system
Note:
* In addition to the %Ens_Portal resource, access to Ensemble functions in the Management Portal in any given namespace requires the Read permission on the default global database resource for that namespace. This check is enforced for access to all Ensemble portal pages.
Ensemble Resources to Protect Code and Data
Resource Code/Data
%Ens._AlertAdministration Grants access to managed alert administration.
%Ens_Alerts Grants access to alert configuration and management
%Ens_ArchiveManager Grants access to the Archive Manager
%Ens_BPL Grants access to BPL
%Ens_BusinessRules Grants access to business rules
%Ens_Code Grants access to all Ensemble classes and routines
%Ens_Credentials Grants access to Ensemble credentials
%Ens_DTL Grants access to DTL
%Ens_EDISchema Grants access to EDI schemas
%Ens_EDISchemaAnnotation Grants access to the HL7 Annotation classes.
%Ens_Jobs Grants access to job data
%Ens_LookupTables Grants access to lookup tables
%Ens_MsgBank Grants access to Message Bank status information
%Ens_MsgBankConfig Grants access to Message Bank configuration
%Ens_ProductionConfig Grants access to production configuration activities
%Ens_PurgeSchedule Grants access to scheduling of Ensemble purge tasks
%Ens_Queues Grants access to queue data
%Ens_RecordMap Grants access to Ensemble record maps
%Ens_RoutingRules Grants access to routing rules
%Ens_Rules Grants access to all Ensemble rules
%Ens_SequenceManager Grants access to the Sequence Manager
%Ens_SystemDefaultConfig Grants access to system default settings
%Ens_WorkflowConfig Grants access to workflow roles and users
Note:
In many cases, Ensemble default behavior uses a less granular resource (like %Ens_Code) which protects multiple data sources including the data protected by a more specific resource (like %Ens_BPL). The predefined Ensemble roles and privileges use the less granular resource, but you can choose alternative roles with more selective privileges.


Send us comments on this page
Copyright © 1997-2019 InterSystems Corporation, Cambridge, MA