Thursday, March 20, 2014

Red Hat JBoss BPM Suite - changing Business Activity Monitor (BAM) report permissions


Within the JBoss BPM Suite you have the capabilities with the Business Activity Monitor (BAM) dashboard to generate almost any report you might need around the data sources at your disposal.

The question now is, how to make sure that only some users can view that sensitive report that is only for the eyes of managers?

This is done by adjusting the permissions within the BAM report properties.

There you have the ability to configure your user at their role levels, as to what section of a dashboard they can access, admin, are allowed to create pages for, to edit, to clean up, and to change panels.
Figure 1 - Expense reports sample BAM dashboard

If we login to the JBoss BPM dashboard, for example a setup of our JBoss BRMS Generic Loan Demo project, we can access from the top menu Dashboards -> Business Dashboards and select the example Expense reports from the Sample dashboards offered on the right menu as shown in Figure 1.

We want to view the permissions as they are now set and maybe adjust them, so we select the Edit Page Properties tool icon at the top of the page.

This opens the properties for this page, from which we select in the right menu Workspaces -> Showcase -> Pages -> Sample dashboards -> Expense reports -> Page permissions.

Figure 2 - added manager & admin access rights to page.
Here it is initially empty with no permissions set or restricting access to the page. As we have decided this needs to be restricted to our managers, we will add that the administrator role can do anything and that the manager roles can only view it. All other roles will not have access to this report, as shown in Figure 2.

If we zoom out to the highest level of default permissions we need to go in the right menu to Workspaces -> Showcase -> Permissions and we can view the default setup for the entire Showcase of reports. These can be modified as needed at the role access level, as shown in Figure 3.
Figure 3 - BAM reporting high level permissions

In this article we have shown you how to access BAM reporting permissions, given you two examples showing both high level permissions and individual report permission settings, and showed you how to add or adjust the permissions you need.

This is just a small sample, there are even finer grains of control as you can also set permissions on each individual panels should you have a need.