PK72722: CLUSTER RESOURCE UNABLE TO BE SEEN BY ADMINAUTHGROUP SETTING

Fixes are available

APAR status

Closed as program error.

Error description

The Admin Console does not give any indication as to why,
when a user logs in, that they see only a subset of the
navigation tree.

Local fix

Problem summary

****************************************************************
* USERS AFFECTED:  All users of WebSphere Application Server   *
*                  V7.0 Administrative Console                 *
****************************************************************
* PROBLEM DESCRIPTION: Cluster resource in the cell unable to  *
*                      be seen by user if the user is not      *
*                      mapped to a role that has Montior       *
*                      level authority.                        *
****************************************************************
* RECOMMENDATION:                                              *
****************************************************************
Problem scenario:
1. Configure CL2 cluster in a DMGR installation.
2. log into administrative console with user that has
administrative authority and create a user name of "cluster".
3. drill down Security -> Administrative Authorization Groups
4. On "Administrative authorization groups" content pane,
click "New" button
5. type CL2AdminGroup in "Name" text field and select "CL2"
for Clusters show scope. And then click "OK" button and save it.
6. click "CL2AdminGroup" on "Administrative authorization
groups" content pane
7. click "Administrative user roles" on "Administrative
authorization groups > CL2AdminGroup" content pane
8. click "Add" button on "Administrative authorization groups
> CL2AdminGroup > Administrative user roles" content pane.
9. click "Search" button and select user "cluster" and move to
Mapped to role. In addition select Administrator in Role. Then
click "OK" button and save it.
----------------------------------------------------------------
------------------------------------------------
When logging into the console with user cluster, they are
unable to see CL2 cluster in the admin console.

When you gave the user named "cluster" administrator authority
to the auth group that contains cluster CL2, the following
message was displayed:

    "Cell wide monitor role is minimally required to
effectively use the administrative console. Assign cell
level role to this user or group if administrative
console access is required."

This message says that, in order to effectively use the
administrative console, the user (in this case "cluster"),
needs to have monitor role at the cell.
So what you need to do is to give user "cluster" monitor role
at the cell level and then you should be able to access the
CL2 cluster when signed on as user "cluster".

To give user "cluster" monitor role at the cell, go to
    Users and Groups -> Administrative user roles -> Add
Search for "cluster", and give "cluster" monitor role
Save the changes.

Problem conclusion

Code was added so that when the user logs into the
administrative console in this configuration and does not have
the monitor role assigned to their userid a similar message
will be displayed (as when the user was created) so the user
will understand why they have a subset of the navigation tree.

The fix for this APAR is currently targeted for inclusion in
fixpack 7.0.0.1.  Please refer to the Recommended Updates
page for delivery information:
http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980

Temporary fix

Comments

APAR Information

APAR number
PK72722
Reported component name
WEBS APP SERV N
Reported component ID
5724H8800
Reported release
700
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2008-09-24
Closed date
2008-11-20
Last modified date
2008-11-20

APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name
WEBS APP SERV N
Fixed component ID
5724H8800

Applicable component levels

R700 PSY
UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEQTP","label":"WebSphere Application Server"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
23 October 2021

Tips

PK72722: CLUSTER RESOURCE UNABLE TO BE SEEN BY ADMINAUTHGROUP SETTING

Fixes are available

Subscribe

APAR status

Closed as program error.

Error description

Local fix

Problem summary

Problem conclusion

Temporary fix

Comments

APAR Information

APAR number

Reported component name

Reported component ID

Reported release

Status

PE

HIPER

Special Attention

Submitted date

Closed date

Last modified date

APAR is sysrouted FROM one or more of the following:

APAR is sysrouted TO one or more of the following:

Fix information

Fixed component name

Fixed component ID

Applicable component levels

R700 PSY

Document Information

Share your feedback

Need support?