Authorization server

The Authorization server is a component within the OpenEdge Command Center server. It is responsible for managing user access to systems, such as the OpenEdge Command Center server, the OpenEdge Command Center agent, and the Authorization server and their resources. It provides a framework for defining and enforcing authorization policies using Role-Based Access Control (RBAC). With RBAC, your access to the systems and their resources is determined by your assigned role. Each role comes with a predefined set of permissions that define the actions you are authorized to perform. For information about roles, see Roles in Authorization server.

The Authorization server starts automatically upon the initial startup of the OpenEdge Command Center server. Upon startup, a set of predefined roles is provisioned within the Authorization server. These roles enforce access control for the OpenEdge Command Center server and Authorization server.

Access control for the OpenEdge Command Center agent is enforced through its bootstrap policy. For more information about the bootstrap policy, see Bootstrap policy file.

The Authorization server supports role-based access control at both the agent level and resource level. Agent-level roles provide access to all resources that the agent manages. Custom roles provide access to specific resources, such as a PAS for OpenEdge instance or OpenEdge database managed by the OpenEdge Command Center agent. You can assign custom roles to users to grant the least-privilege access.

The Authorization server provides user and role management capabilities. You can create users, assign roles, remove roles, and create and manage custom roles in the Authorization server through Authorization server REST APIs. For more information, see Create users and manage roles using Authorization server.