The Authorization server uses Role-Based Access Control (RBAC) to manage access to systems and their resources, including the OpenEdge Command Center server, the OpenEdge Command Center agent, and the Authorization server itself. It assigns permissions to specific roles instead of individual users, which simplifies the administration of access control. In addition to the predefined system roles, you can create custom roles that grant access to specific resources managed by the OpenEdge Command Center agent.

Using the Authorization server REST APIs, you can create users and assign or remove roles for a specific user, and create and manage custom roles in the Authorization server. This chapter covers tasks, such as logging in, creating users, assigning and removing roles. It also provides an overview of custom roles and answers frequently asked questions.

Note: The instructions in this chapter are written for Swagger UI, however, you can perform similar tasks using Postman.

Prerequisites

You must have the AUTHZ_ADMIN role to access the Authorization server and perform the tasks described in this chapter.