Types of ALBPM Administrative Users

ALBPM System Administrator

A system administrator is responsible for configuring and maintaining ALBPM Enterprise. A system administrator has access to the entire project and can:

Create, configure, and control process execution engines
Configure audit record generation
Create and modify particpants
Note: When using a hybrid directory service, all particpant information is maintained by the LDAP administrator.
Monitor processes
Publish and deploy projects

There are two types of ALBPM administrors:

ALBPM Administrator Type	Description
ALBPM administrator	defined when configuring a directory service. There is one ALBPM administrator for each directory service configuration.
ALBPM Administrator (participant)	defined by granting ALBPM administrator access to a participant within the organization. This user has the same administrative priviledges as the main ALBPM Administrator.

User Administrator

A user administrator is responsible for managing participants within an organizational unit, including creating and modifying participants and assiging and removing roles.

An ALBPM Administrator can grant user administrator priviledges to any particpant. The scope of a user administrator's access to manage particpants is determined by the organizational unit they are assigned to. This assignment can be at the participant or group level.

Authentication of Administrators

Both ALBPM system administrators and user administrators must enter a username and password to access Process Administrator. Where ALBPM stores the passwords and permission information depend on the type of administrative user and directory service configuration.

Administrator Type	Location of password
ALBPM System Administrator	Is stored as part of the directory service configuration. If you are using a database-only directory service this password can be changed using the Admin Center. If you are using a hybrid directory service, this password must be changed for the ALBPM Administrator user on your LDAP server.
ALBPM System Administrator (participant)	Is stored as part of the particpant information. If you are using a database-only directory service, this password can be changed using Process Administrator. If you are using a hybrid directory service, this password must be changed for this participant on your LDAP server.
User Administrator	Permissions and password are are stored as part of the participant information. If you are using a database-only directory service, this password can be changed using Process Administrator. If you are using a hybrid directory service, this password must be changed for this participant on your LDAP server.