Using JBoss EAP for deploying, managing, and creating Java applications means that a variety of users will need access to JBoss’s services and consoles. While JBoss EAP itself provides a simple user script, this often leaves too many security concerns open. Instead, Role-Based Access Control (RBAC) can be used to fine-tune access for JBoss EAP itself and any supported applications.
Learning Objectives
Successfully complete this lab by achieving the following learning objectives:
- Create a Management User
Move into the JBoss home directory.
Create a
cloud-userto whom we will grant SuperUser permissions.
- Enable RBAC Through the CLI
Start the JBoss CLI.
From here, we can interact with our JBoss setup as we would any virtual machine.
Move into the authorization node.
Change the provider to RBAC.
- Grant SuperUser Permissions
While still using the JBoss CLI, grant the
cloud-userSuperUser privileges.Exit the CLI.
Restart JBoss.
- Add a User via the Management Interface
Access the management interface at
<PUBLIC_IP>:9990and log in as thecloud-user.In Access Control, click Start.
From the left menu, click Users.
Click the plus sign to add a user.
In the Add User window, set the following values:
- Name: louise
- Include: SuperUser
Leave the rest as their defaults and click Add.
