Configure roles and privileges
Set up who can log in to and run Test Services by creating its roles and assigning them to your users. This page is for the administrator who manages access in OpenLab CDS. Test Services uses OpenLab Shared Services (OLSS) authentication, so you assign these roles in the Control Panel, the same place you manage other OpenLab CDS roles.
Prerequisites
- You must have the OpenLab Shared Services administrator role to create roles and assign them to users.
- The authentication provider for OpenLab CDS must be set to Internal or Windows Domain. (On a file-based Workstation with authentication set to None, no login is required and this page does not apply. See About authentication.)
- Test Services must be installed. (See Install Test Services.)
Create the Test Services roles
Test Services creates its two roles automatically the first time an administrator signs in after installation. You do not create them by hand.
-
Open Test Services in a browser and log in with an OLSS administrator account. (See Log in to Test Services.)
Test Services creates two Project roles in OLSS, Test Services Administrator and Test Services User, along with the Run Test Services and Manage Test Services privileges.
-
Confirm that the roles exist in OpenLab CDS Control Panel under Administration > Roles.
Any user who holds the Everything role receives the Run Test Services and Manage Test Services privileges automatically. Users without the Everything role need a Test Services role assigned to them.
Assign a role to a user
Assign the Test Services User role to lab users who need to run tests, and the Test Services Administrator role to those who also manage settings, schedules, and notifications.
-
Open OpenLab CDS Control Panel.
-
Navigate to Administration > Users.
-
Select the user.
-
Open the user's Role assignments.
-
Select Test Services User or Test Services Administrator.
-
Save the user.
The user can log in to Test Services the next time they open it. (See Roles and privileges for what each role can do.)
Grant the privileges a test needs
The two Test Services roles cover login and the base tests. Some tests require additional OLSS privileges that you assign separately. For example, the Security Test needs Manage Security, and the OpenLab CDS Workflow Test needs instrument and sequence privileges.
- In Control Panel, open the role you want to extend, or create a dedicated role for test operators.
- Add the privileges required by the tests those users run. (See Roles and privileges for the privilege required by each test.)
- Save the role.
The user who starts a test must personally hold every privilege that test requires. Granting the broad Everything role to satisfy a test is a compliance risk, because it also grants data-deletion and sample-run privileges. Assign only the specific privileges each test needs.
See also
- Roles and privileges: what each role and privilege allows, and the privileges each test requires.
- About authentication: how Test Services validates users against OpenLab Shared Services.
- Log in to Test Services: log in for the first time to create the roles.
- Set up run credentials: run tests under a single service account.
- Reconfigure after OpenLab CDS or authentication changes: restore roles after a configuration change.