Dynamic Role

This allows you to use the tags to specify the required servers. When you specify a particular tag key and value, only the servers that adhere to the key value pair are part of the role.

Note: To use this role, you need to ensure to update all the required configuration, then enable TBAC from the admin.jsp page.

You can activate the dynamic role by using the following settings in the admin.jsp page:


Location	Setting
Controller Settings	`appdynamics.rbac.dynamic.role.creation.enabled=true`
Account Settings	`DYNAMIC_ROLE_CREATION=true` `entity.tagging.enabled=true` `tag.management.enabled=true` `tac.enabled=true`

To add tag-based servers to a specific role, perform the following on the Controller UI by navigating to the profile icon, then selecting Administration:

Select the Roles tab.
Click Create Role > Create Dynamic Role .
Under General tab, specify the name of the role.
Under Access Tags, select the required tag key and tag value.
Only the allowed tags are displayed. To use the tags, the administrator must allowlist the tags using the Tag Management UI. See Allowed Tags.
Under User and Groups with this Role, add the users or groups.
When the added user logs in to Controller and accesses Servers page, they can monitor only those servers that adhere to the key value pair defined in the role.

If any server is added later and adheres to the same tag key value pair, it is automatically added to the role. The users who are part of the role will automatically get access to monitor the new server.