IBM WebSphere V5.0 Security: WebSphere Handbook Series

10.3. Administrative roles

The J2EE role-based authorization concept has been extended to protect the WebSphere Administrative subsystem. Four roles are defined for performing administrative tasks.

Table 10-1. WebSphere Administrative roles

Role	Description
monitor	Least privileged; allows a user to view the WebSphere configuration and current state.
configurator	Monitor privilege plus the ability to change the WebSphere configuration.
operator	Monitor privilege plus the ability to change runtime state, such as starting or stopping services.
administrator	Operator plus configurator privilege.

Note

The Admin roles are effective only when Global Security is enabled.

The identity that is specified when enabling Global Security is automatically mapped to ...