How to Restrict User Access to a Limited Subset of the UCMDB Server JMX Methods

As a system administrator, you can define roles in the system that can only access a limited subset of the UCMDB server JMX methods. This task describes how to set the regex expression to achieve this goal.

The JMX Permission Services enable you to set, view, and remove the regex expression:

UCMDB Server JMX Methods

Service	Method	Description
JMX Permission Services	getRegexExpression	Use this operation to get and view the regex expression
	removeRegexExpression	Use this operation to remove the JMX regex expression. Removing the regex means that access will be fully permitted to JMX methods.
	setRegexExpression	Use this operation to set JMX regex expression.

To set the regex expression in order to restrict user access to a limited subset of the UCMDB server JMX methods,

1. Launch your Web browser on the machine where UCMDB is installed and enter the following address: https://localhost:8443/jmx-console.

2. Enter the JMX console authentication credentials.

3. Under UCMDB, click UCMDB:service=JMX Permission Services.

4. Locate the setRegexExpression operation, set a regex expression using the setRegexExpression method, and click Invoke.

   For example, if you type set in the Value field and click Invoke, this means all the operations from JMX that start with the word set will be excluded from JMX.

To view the regex expression, locate the getRegexExpression operation, and click Invoke.

To remove the regex expression, locate the removeRegexExpression operation, and click Invoke.

Note the following rules when you use the JMX Permission Services to restrict user access to JMX methods:

• Users who have Server Administrator Privileges enabled and have the JMX Full Access permission set will have complete access to the JMX module.

• Users who have Server Administrator Privileges enabled but do not have the JMX Full Access permission set will have access to the JMX module based on a regex expression.

• If no regex expression is set, the user will have full access to JMX, regardless of whether the user has the JMX Full Acess permission set or not.

  • JMX Search - If the regex expression is set and the user does not have the JMX Full Access permission, then the operations that match the regex will not show in the search results.

  • Operation Index view - The JMX methods that match the regex expression are not visible to users.