Role Mapping (roles-map.xml) Configuration File

Use the <UnwiredPlatform_InstallDir>\SCC-XX\conf\roles-map.xml to map roles for Sybase Control Center.

The <uaf-roles> section of the configuration file defines the available Sybase Control Center logical roles. The syntax is:

<uaf-roles>
   <role name="<myRoleName>" description="<myRoleDescription>"
</uaf-roles>

The <security-modules> section lists each login module defined in csi.properties file and maps the security provider's physical roles to the logical roles for Sybase Control Center. Specifically, a role mapping entry could be added per the following format for a login module named SUP LDAP Login Module:

<module name="SUP LDAP Login Module">
   <role-mapping modRole="SUP Administrator" 
   uafRole="uaAnonymous,uaAgentAdmin,
   uaplug-inAdmin,sccAdminRole,sccUserRole" />
   <role-mapping modRole="SUP Domain Administrator"
   uafRole="uaAnonymous,uaAgentAdmin,uaplug-inAdmin,
   sccUserRole" />
 </module>

If necessary, replace the modRole values for each applicable login module with your own security provider role names to map them to Sybase Control Center roles. By default, the configuration file assumes that the security repository includes the "SUP Administrator" and "SUP Domain Administrator" roles. The "SUP Domain Administrator" role mapping is required only if you plan to assign domain administrators within the cluster.