Add users to roles

Before you begin

Create users and groups. See Manage users and groups.

To add users to a default WebLogic Server global role or a role that you have created:

In the left pane of the Administration Console, select Security Realms.
On the Summary of Security Realms page, select the name of the realm that contains the role definition (for example, myrealm).
On the Settings page, select the Roles and Policies tab. Then select the Roles subtab.
The Roles page organizes all of the domain's resources and corresponding roles in a hierarchical tree control.
Access the role's Edit Role page:
- For a global role:
  1. In the Roles table, in the Name column, expand the Global Roles node.
  2. In the Name column, expand the Roles node.
  3. In the role's Role Conditions column, click the View Role Conditions link.
    Note: If the Role Conditions column is empty, select the radio button next the to the role's Name column. Then click the Edit Role button.
- For a scoped role:
  1. In the Roles table, in the Name column, expand the nodes in the Names column until you find the resource that contains the role.
    For information on finding resources in the Names column, see Column Display.
  2. In the Name column, expand the resource's node and expand its Roles sub-node.
  3. In the role's Role Conditions column, click the View Role Conditions link.
    Note: If the Role Conditions column is empty, select the radio button next the to the role's Name column. Then click the Edit Role button.
On the role's Edit Role page, create a role condition that adds a user to the role:
1. In the Role Conditions section, click Add Conditions.
2. On the Choose a Predicate page, in the Predicate List, select User, Group, or Role.
  BEA recommends that you use the Group condition whenever possible. This condition grants the security role to all members of the specified group (that is, multiple users).
  
  For a description of all conditions in the Predicate List, see Security Role Conditions .
3. Click Next.
4. Enter a user or group name in the argument field, and click Add.
  The names you add must match groups or users in the security realm active for this WebLogic domain.
5. Click Finish.
On the role's Edit Role page, click Save.