App Role Web Application

SERVICE Usage for K2HR3 Web Application

This section explains how to operate SERVICE using the K2HR3 Web Application.

Display of SERVICE

If SERVICE has not yet been registered in TENANT(when using the K2HR3 system for the first time), registration of SERVICE is required first.
If SERVICE data already exists, it is displayed your registered SERVICE in in the left tree by selecting [SERVICE] item.

Display of SERVICE OWNER

K2HR3 Usage Application - Service Owner

Display of SERVICE MEMBER

K2HR3 Usage Application - Service Member

Registering SERVICE by OWNER

Register SERVICE for OWNER side providing RESOURCE. You can register new SERVICE for OWNER by you click the K2HR3 Add Button button next to [SERVICE] at the top after selecting [SERVICE] item in the left tree.

After clicking the button, a dialog for registering SERVICE is displayed.

K2HR3 Usage Application - Service Owner Create Dialog

Enter the SERVICE name and the RESOURCE provided by SERVICE in the displayed dialog and click the K2HR3 OK Button button to register SERVICE.
You can register static RESOURCE or dynamic RESOURCE to SERVICE’s RESOURCE.

After clicking the button, a dialog for registering SERVICE is displayed.

SERVICE registered as OWNER can be confirmed by expanding SERVICE in the left tree.
OWNER’s SERVICE item in left tree has the K2HR3 SERVICE OWNER icon is displayed next to its name.

Editing of SERVICE by OWNER

OWNER can edit the contents of registered SERVICE.
First, you need to select SERVICE name under [SERVICE] item in left tree for editing the contents of already registered SERVICE.
After selection, the data of the SERVICE is displayed in the main area of K2HR3 Web Application.

You can directly edit, add, or delete this SERVICE data in main area.
After editing, you can save the SERVICE data by clicking the K2HR3 SAVE Button button.
You click the K2HR3 CANCEL Button button for discarding the modified data.

K2HR3 Usage Application - Service Owner Page

After selecting SERVICE name, the following items displayed in the main area.

To cooperate with OWNER’s SERVICE

This operation allows that MEMBER’s TENANT to cooperate with OWNER’S SERVICE.
MEMBER needs to get be allowed their TENANT by OWNER to start cooperating with OWNER’s SERVICE.

For cooperating with OWNER’s SERVICE, USER of MEMBER selects SERVICE name which is displayed without K2HR3 SERVICE OWNER icon in the left tree.
You can find MEMBER’s SERVICE name which is allowed cooperating with OWNER’s SERVICE under [SERVICE] item in the left tree.
MEMBER’s SERVICE name is as same as OWNER’s SERVICE name
And you can select it to start cooperating with OWNER’s SERVICE.
After selecting it, you click the K2HR3 Add Button button next to **[SERVICE] ** at the top.

After this click, a dialog for SERVICE cooperation will be displayed.

K2HR3 Usage Application - Service Member Create Dialog

If you click the K2HR3 OK Button button in the displayed dialog, it starts that MEMBER’s SERVICE cooperates with OWNER’s SERVICE.
You can specify one ROLE name as an initial ROLE which controls member HOSTs for SERVICE before clicking K2HR3 OK Button button on dialog.

Following Items displayed in this dialog and their contents are shown below.

SERVICE registered as MEMBER can be confirmed by expanding SERVICE in the left tree.
MEMBER’s SERVICE item in left tree does not have the K2HR3 SERVICE OWNER icon on its name.

Contents of MEMBER’s SERVICE

MEMBER’s SERVICE cooperated with OWNER’s SERVICE is displayed on the left tree.
After selecting MEMBER’s SERVICE name under [SERVICE] item in left tree, it is displayed subitems which are ROLE, POLICY-RULE, RESOURCE in MEMBER’s SERVICE name item.

K2HR3 Usage Application - Service Member Tree

The contents of each subitems are explained below.

ROLE in MEMBER’s SERVICE

This ROLE subitem has only “acr-role”.
After selecting “acr-role”, the contents of this is displayed in main area.
This “acr-role” has only YRN full path of “acr-policy” as POLICY-RULE.
The contents of this ROLE can not be edited.

K2HR3 Usage Application - Service Member acr-role

POLICY-RULE in MEMBER’s SERVICE

This POLICY-RULE subitem has only “acr-policy”.
After selecting “acr-policy”, the contents of this is displayed in main area.
This “acr-policy” has EFFECT, ACTION and RESOURCES which is provided by OWNER’s SERVICE.
RESOURCES has enumerated *YRN full path** of all RESOURCEs which are provided by OWNER’s SERVICE.

The contents of this POLICY-RULE can not be edited.

K2HR3 Usage Application - Service Member acr-policy

RESOURCE in MEMBER’s SERVICE

This RESOURCE subitem is listed all RESOURCEs which are provided by OWNER’s SERVICE.
After selecting each RESOURCE name, the contents of it is displayed in main area.
Each RESOURCE is registered static or dynamic RESOURCE set by OWNER to SERVICE.
This contents of all RESOURCEs can not be edited.

K2HR3 Usage Application - Service Member RESOURCE

ROLEs associated of MEMBER’s SERVICE

MEMBER’s SERVICE has ROLEs associated of MEMBER’s SERVICE to cooperate with OWNER’s SERVICE.
This ROLE is not special for SERVICE feature, is as same as normal ROLE.
Then the ROLE which is associated of SERVICE is listed under [ROLE] top item in left tree.
If you select the ROLE, the contents of ROLE is displayed in main area.
The contents of ROLEs associated of MEMBER’s SERVICE has at least one ALIAS which is YRN full path to “acr-role”.
In other words, the ROLE associated of MEMBER’s SERVICE must have ALIAS to “acr-role” ROLE.
Thus the ROLE which has ALIAS to “acr-role” is associated of MEMBER’s SERVICE.

If you want to add the ROLE of MEMBER’s SERVICE, you can add “acr-role” to ALIAS in that ROLE.

K2HR3 Usage Application - Service Member ROLE

How to associate ROLE to SERVICE

In order to use OWNER’s SERVICE from MEMBER system, MEMBER’s ROLE which is registered MEMBER system’s HOST is required to associated in MEMBER’s SERVICE.
Its ROLE must have YRN full path to “acr-role” in ALIAS.
For associating to MEMBER’s SERVICE, you can register “acr-role” to these ROLE anytime.
Thus just register it and the cooperating with OWNER’s SERVICE will be completed.

How to remove ROLE from SERVICE

How to remove the ROLE which is associated to MEMBER’s SERVICE is as same as adding it.
It is only deleting “acr-role” in ALIAS from the ROLE.
Just delete it and it will be completed.

Attribute information of SERVICE

To display OWNER’s and MEMBER’s SERVICE attribute information, first select SERVICE in the left tree.
The way to displaying attribute information for both OWNER and MEMBER is the same.
After selection, click K2HR3 Path Button on the left side of [SERVICE] to display the SERVICE attribute information(Selected Path Information) dialog.
The attribute information of SERVICE is displayed in this dialog.

K2HR3 Usage Application - Service Information

The following list describes attribute information of SERVICE.

App Role Web Application