CA Role & Compliance Manager (RCM) Security and the eurekify.cfg

The RCM security model and how to use it are (IMHO) not covered well in the documentation. WebPortal users and their rights (and roles) are maintained in the eurekify.cfg file, which can be loaded from either the DM or DNA utility. For safety reasons before I modify this file I save it locally, modify a copy of it and verify my changes to be certain that changes made are saved in the database. A restart of RCM WebPortal is recommended to ensure changes made to users and their rights are acted upon by the RCM WebPortal.

***NOTE: As with all Tips and Tricks we provide on the IDMWorks blog, use the following AT YOUR OWN RISK.  We do not guarantee this will work in your environment and make no warranties***

The RCM security model and how to use it are (IMHO) not covered well in the documentation.  WebPortal users and their rights (and roles) are maintained in the eurekify.cfg file, which can be loaded from either the DM or DNA utility.  For safety reasons before I modify this file I save it locally, modify a copy of it and verify my changes to be certain that changes made are saved in the database.  A restart of RCM WebPortal is recommended to ensure changes made to users and their rights are acted upon by the RCM WebPortal.

One of the RCM WebPortal security items that I have found lacking was the ability to selectively limit or grant access to areas of the RCM Portal more granular than just a whole menu item.  For example, perhaps you want a user or a group of users to have access to specific report or administration activity.  Without modifications to the RCM security configuration your only option is to have access to all or none of the functions. To assist with this I have created the add-on RCM_eurekify_resources.rdb. This contains all of the RCM 12.5 SP3 WebPortal menu options.  With these added you can create roles of access to different RCM WebPortal menu options.

To use, complete the following steps:

  1. Download your current eurekify.cfg, .rdb, and .udb from the database
  2. Using a text editor (notepad) add the RCM_eurekify_resources.rdb to the end of your .rdb file
  3. Using DM or DNA add new roles and assign them to the appropriate users and your new portal resources as wanted.  (Note:  you will need to remove the existing {menu}.* options from your user roles)
  4. Save the eurekify.cfg (with and overwrite of the .rdb) to the database
  5. Restart the RCM WebPortal

    Questions, comments or concerns?  Feel free to reach out to us at IDMWorks.