Setting user roles for external collaboration
Assign the EMPLOYEE_EXTENDED role to internal users who are allowed to create content that is visible to external users.
Before you begin
You must start the wsadmin client and load profilesAdmin.py in order to run the commands that set user roles. See Starting the wsadmin client and Running Profiles administrative commands for more information.
The user whose role you set must be registered with Profiles via IBM® Tivoli® Directory Integrator.
About this task
By default, internal users cannot create content that is visible to external users. To allow collaboration between internal users and external users, you must assign the EMPLOYEE_EXTENDED role to the internal users. Only users with the EMPLOYEE_EXTENDED role can create content that can be shared with external users. However, the content can be shared by any internal user.
Procedure
What to do next
- Retrieve the role that is associated with a user's email address by running the command
ProfilesService.getRoles(String user_email_addr)
.ProfilesService.getRoles("aalain@example.com") [employee]
- Retrieve the role that is associated with a user's directory ID by running the command
ProfilesService.getRolesByUserId(String user_external_id)
.ProfilesService.getRolesByUserId("ec8a89c0-f41d-102c-9b60-f225bc6c4af4") [employee.extended]