Role Permissions

Note : This document may refer to Carbon components which are not used in your currently running Carbon instance. So please consider permissions only on Carbon components that you currently have.

A Role must have this permission to log into the admin console. Without logging into the console, you can only have following facilities. If your Carbon instance doesn't contain any of the following functionalities, you won't have permissions to perform anything when you are not logged in.

View a list of services.
Access WSDL11 and WSDL12 of those services.
Use following tools.
- WSDL2Java, Java2WSDL, WSDL Converter, Try It, Service Validator, Module Validator

Manage system configuration

A Role must have this permission to use following functionalities.

Throttling
Caching
Reliable Messaging
Operation Management
Governance
Scheduled Tasks
Module Management
Transport Management
JavaScript Services
Eventing
Logging
XKMS configuring
Data Service
Bam
Configure Synapse
Identity
Registry
- Access to Resource Browser
- Manage properties
- Manage Activities
- Manage Association
- Resource Search
- Registry Info
- Registry Profiles
Governance
- WSDL import
- Gadget Source
- Life cycles
- Service Addition

Manage security

A Role must have this permission to use following functionalities.

Security
Manage Profiles
STS
Claim Management

Upload services

A Role must have this permission to upload following types of services.

JAR Services
AAR Services
POJO Services
JAXWS Services
EJB Services
Axis1 Services
BPEL Processes

Manage services

A Role must have this permission to use following functionalities.

All kinds of Axis services (JAR, AAR, POJO, JAXWS, EJB, Axis1)
Proxy Services
Modules
Cluster Management

Manage mediation

A Role must have this permission to use all kinds of mediation functionalities.

Sequences
Mediation
Local Entry

Monitor system

A Role must have this permission to use monitoring capabilities.

System Statistics
Logging
Mediation Statistics
Mediation Tracer