How to Set Authorization Roles for the BizTalk Adapters

The following procedure describes how to assign the Commerce Server Adapters service account, CSLOB, to its required authorization roles by using Authorization Manager. Perform this procedure on computers where the Commerce Server Web services are run.

To add the CSLOB account to the required authorization roles

1. Click Start, click Run, type azman.msc, and then click OK. If CatalogAuthorizationStore.xml, OrdersAuthorizationStore.xml, and ProfilesAuthorizationStore.xml appear in the left pane, go to step 6.

2. In the Authorization Manager screen, right-click Authorization Manager, and then click Open Authorization Store.

3. In the Open Authorization Store dialog box, verify that the XML file option is selected, and then click Browse to locate the role assignments for the Web service. For example, the catalog authorization policy XML file is located at <drive:>\Inetpub\Wwwroot\CatalogWebService.

4. Select <authorization policy name>.xml, and then click Open.

5. In the Open Authorization Store dialog box, click OK.

6. Set the Catalog System authorization store role permissions:

   1. Expand the role assignments for CatalogAuthorizationStore.xml (for example, \CatalogAuthorizationStore.xml\CatalogandInventorySystem\Role Assignments).

   2. Right-click CatalogAdministrator, and then click Assign Windows Users and Groups.

   3. In the Select Users, Computers, or Groups dialog box, in the Enter the object names to select box, type CSLOB or the name that you created for the Commerce Server Adapters service account. Click OK.

   4. Repeat steps b and c for the InventoryAdministrator role.

7. Set the Orders System authorization store role permissions:

   1. Expand the role assignments for OrdersAuthorizationStore.xml (for example, \OrdersAuthorizationStore.xml\OrdersSystem\Role Assignments).

   2. Right-click OrdersAdapter, and then click Assign Windows Users and Groups.

   3. In the Select Users, Computers, or Groups dialog box, in the Enter the object names to select box, type CSLOB or the name that you created for the Commerce Server Adapters service account. Click OK.

8. Set the Profiles_Adapter role permissions for the UserObject, Address, Organization, BlanketPO, CreditCard, and Currency profile definitions in the Profiles System authorization store:

   1. Expand the role assignments for ProfilesAuthorizationStore.xml (for example, \ProfilesAuthorizationStore.xml\ProfilesSystem\<profile definition>\Role Assignments).

   2. Right-click ProfileAdministrator, and then click Assign Windows Users and Groups.

   3. In the Select Users, Computers, or Groups dialog box, in the Enter the object names to select box, type CSLOB or the name that you created for the Commerce Server Adapters service account. Click OK.

   4. Repeat steps b and c for each profile definition in the Profiles System authorization store.

See Also

Other Resources

What Are the Accounts and Groups to Create?

What Are the Required Authorization Store Permissions for BizTalk Adapters?

Configuring the Business Management Server

Authorizing Users and Groups to Access Web Services