Technical data

Overlapping Permissions for System Administration MBeans and Policies on Resourc-
Configuring and Managing WebLogic Server 8-5
! The Administration Console. For information about using this UI, refer to the
Administration Console Online Help.
Note: To use the Administration Console, you must belong to one of the groups
and roles that are described in Table 8-2. The other user interfaces do not
require you to belong to one of the default groups.
! The weblogic.Admin command. For information about using this UI, refer to
"weblogic.Admin Command-Line Reference"intheWebLogic Server Command
Line Reference.
! MBean APIs. For information about using these APIs, refer to the Programming
WebLogic JMX Services guide.
If you attempt to invoke an operation for which you do not have permission, the
WebLogic Server instance throws a
weblogic.management.NoAccessRuntimeException. The server instance sends
this exception to its log file, and you can configure a server to send exceptions to
standard out. If you invoke the command from the Administration Console, you see an
Access denied error.
Overlapping Permissions for System
Administration MBeans and Policies on
Resources
For a few, specific operations, the MBean permissions described in previous sections
overlap with another security scheme, policies on resources. In these cases, a user must
satisfy both security schemes to invoke the operation.
This section contains the following subsections:
! Resources and Policies
! Working with Policies
! Maintaining a Consistent Security Scheme