ZQ410 Unit 5 Transcript
Slide 1
Setting up server security, approvals,
and quality gates
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
IBM UrbanCode Deploy uses a flexible team-based and role-based security model that maps to
your organizational structure. In this unit, you learn how to define and configure roles, set up
approvals and notifications, and use quality statuses and gates.
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 2
Objectives
▪ Describe the significance of a system team
▪ Create authorization realms, user groups, and teams
▪ Create and define roles and permissions
▪ Set up notifications and approvals
▪ Implement statuses and gates to ensure testing quality
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 3
Topics
• Configuring server security
• Setting up notifications
• Setting up an approval process
• Implementing statuses and gates to improve quality
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 4
The security system for the server consists of an authentication realm,
authorization realm, roles, and teams
Steps for setting up security
Create an Create an Create roles Create or Create teams
Assign objects
authorization authentication and define import users and assign
to teams
realm realm permissions and groups users
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
From a high level, the security system for the server consists of an authorization realm,
authentication realm, roles, and teams.
The authentication realm verifies the identity of the user or system that is trying to log on to the
IBM UrbanCode Deploy server.
The authorization realm manages user groups. Roles manage permissions. Teams bring together
users with roles and specify which objects the team can access.
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 5
You can access the security system from any of these links on the Settings tab
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
You access the security features from the Settings tab.
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 6
Authorization realms manage user groups
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
Authorization realms verify the identity of a user or system attempting to login. There are three
available types for the server, internal storage authorization, an LDAP authorization realm, and an
SSO authorization realm:
• Internal storage authorization: Does not retrieve users from any external source. Instead,
you add users to internal storage authorization realms manually.
• LDAP authorization realm (Lightweight Directory Access Protocol): LDAP is a widely
used protocol for accessing distributed directory information over IP networks. It uses an
external LDAP server for authorization.
• SSO authorization realm (single sign-on): Uses an external server for authorization and
allows a user to sign on with one set of credentials for multiple applications.
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 7
An authentication realm is a source of information about users
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
Authentication realms manage users and determine user identity within authorization realms for
the server. Users can be created manually or imported from external systems, such as LDAP.
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 8
A role is a set of permissions
Role
Objects
Permissions
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
Permissions define what can be done; roles define who can do it. Separate permissions are
available for each type of object on the server, including components, applications, and
environments.
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 9
Groups identify users with the same role
Group name
Group members
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
Groups are containers that grant permissions to multiple users; members automatically share a
group's permissions.
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 10
Keep the roles simple but ensure sufficiency for performing work
Role Object and Permissions
• Resources (create, edit, view)
• Application (create, edit, manage, snapshots, run component process)
Configurator • Environment (create, edit, execute, view)
• Component (create, edit, manage versions, view
• Resources (view)
Release • Application (view, manage snapshots, run component applications)
Engineer • Environment (view, execute)
• Component (view)
• Resources (view)
• Application (view)
Approver • Environment (view, execute)
• Component (view)
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
When defining the roles for your team, start by keeping the roles simple, but make them sufficient
to perform the appropriate work.
10
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 11
Groups grant permissions to multiple users
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
You can grant a group of users the same role and permissions by dragging the group to the role.
11
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 12
Users are granted permissions by being assigned to teams
Any users who are assigned to the
Developer role will have the
permissions associated with this role
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
You can also assign individuals to teams to give them the proper permissions.
Teams provide two important functions:
• First, a team provides the mechanism to assign roles to users. When a user is assigned a
role, all permissions that are granted to the role are automatically granted to the user, but
only for objects that the team has access to.
• Second, teams secure objects such as applications, components, and environments. When
a team is attached to an object, only team members with the appropriate permissions can
interact with the affected resource.
12
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 13
Restrict permissions by assigning teams to objects
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
You can assign an object, such as an application, to a team in the Team Object Mappings
section.
13
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 14
Security reports provide information about user roles and privileges
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
Security reports track information about roles and permissions. The application security report
shows the user roles and permissions that are set for applications.
14
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 15
Topics
• Configuring server security
• Setting up notifications
• Setting up an approval process
• Implementing statuses and gates to improve quality
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
15
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 16
Notifications can be sent when user-defined trigger events occur
Process failed!
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
Notifications are emails that are sent whenever user-defined trigger events on the server occur,
such as when a deployment finishes or an approval is required.
16
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 17
IBM UrbanCode Deploy requires an external SMTP mail server to send
notifications
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
Before you can send notifications, users must have e-mail addresses attached to them on the
server; email addresses are not automatically imported.
17
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 18
Notifications are sent to appropriate parties based on scheme
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
To set up notifications, display the Notifications pane: click Settings > Notification Schemes.
18
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 19
Notifications include triggering events and roles
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
When you set up the notification, you determine which users receive notification by selecting both
the triggering events and the role. The role is inherited from the security system.
19
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 20
Notifications are sent to appropriate parties based on scheme
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
You can assign notification schemes to applications and environments at creation or in the
Configuration tab.
20
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 21
Topics
• Configuring server security
• Setting up notifications
• Setting up an approval process
• Implementing statuses and gates to improve quality
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
21
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 22
Approvals provide more visibility into deployments for audit trails
Steps for setting up approvals
Select Verify Enable
Identify the Define the
notification appropriate approvals on
approval approval
schema for approvers in an
roles process
application role environment
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
An approval specifies the job that needs approval and the role of the approver. The main tasks for
setting up an approval process include selecting the notification scheme, enabling approvals on
an environment, and defining the approval process.
22
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 23
An approval process specifies the job that needs approval and the role of the
approver
Select approver and
Select to require notification type
approvals
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
To ensure that components cannot be deployed to the environment without first being approved,
select the require Approvals check box. This option enforces an approval process before the
deployment can be deployed to the environment. Approvals are usually attached to
environments.
23
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 24
When a request for approval is made, the users with the corresponding role are
notified through email
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
The approver can approve or reject a deployment, as well as provide comments to the decision.
24
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 25
The Deployment Details report tracks approval status
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
You can see the status of the approvals by clicking Reports > Deployment Details.
25
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 26
Topics
• Configuring server security
• Setting up notifications
• Setting up an approval process
• Implementing environment gates to improve quality
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
26
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 27
Gates specify the conditions that must be met for deployment
DEV SIT QA UAT PROD
Quality Verified
Ready for Testing
Deployment Ready
Necessary Bug Fix
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
An environment gate is a requirement that must be met before component versions can be
deployed to an environment. A version status adds a tag to a version to indicate that it has met
those requirements and can be deployed to the environment.
27
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 28
Using statuses and gates requires initial configuration
Steps for setting up and using gates
Select
Create Configure Add step in Check status
components
version environment component in Versions
with “latest
statuses gates process tab
with status”
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
When you set up gates, you first need to create the version statuses and configure the
environment gates. Then, you add a step in the component process to check the version status.
When you select the components for your deployment, choose “latest with status” prior to
deployment. This deploys only those versions that have met the appropriate status.
28
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 29
Version statuses identify when component versions meet criteria
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
On the statuses tab, a table displays the currently configured version statuses. When you create
a status, you can set the required role field as a specific role to restrict the ability to assign a
status to a version.
29
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 30
Environment gates check the version tags on component versions
Choose an environment
that requires gates, and
add conditions.
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
After you have your statuses configured, you can set up the application gates on your
environments. This is done from the application’s Configuration tab.
For each environment, you can set version statuses that the version must have before it can be
deployed to that environment. In this example, only versions that have the status “Ready for
Testing” are allowed to be deployed to the UAT environment.
30
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 31
Statuses can be added to versions automatically from component processes
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
You can add statuses to versions in component processes using the “Add Status to Version” step
in the IBM UrbanCode Deploy Versions plugin.
31
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 32
Adding version statuses to component versions becomes part of the process
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
Now the component process includes adding a version status.
32
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 33
Version statuses are tracked in each component
Shows when a
status was added
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
In order to view a version status, navigate to the component containing the version and then to
component’s versions tab. Click into the version. You’ll see a table containing the version’s
statuses and will be able to add or remove statuses from this interface.
33
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 34
Select the latest components with a status
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
When you select components for deployment, select “latest with status” to view the components
that have passed the gate.
34
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 35
Unit summary
• The security system for the server consists of an authentication realm, authorization
realm, roles, and teams
• Permissions define what can be done, not who can do it; roles define who can do it
• Users are granted permissions by being assigned to teams
• Notifications are emails that are sent whenever user-defined trigger events on the server
occur
• Approvals provide more visibility into deployments for audit trails
• An environment gate is a requirement that must be met before component versions can
be deployed to an environment
• Version statuses identify when component versions meet criteria
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
35
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
ZQ410 Unit 5 Transcript
Slide 36
Exercises: Setting up server security
• Create a new user and role
• Create a team
• Associate the team to the existing application and environments
• Log in as a developer
Unit 5: Setting up server security, approvals, and quality gates © Copyright IBM Corporation 2017
36
© Copyright IBM Corporation 2017
Course materials may not be reproduced in whole or in part without the prior written permission of IBM.
