There are various sections of security policies that can be set for each role or user. While there are permissions that can be set on each individual item in FME Server, the visibility of pages in the FME Server web interface are managed by the Access or Manage privileges.
Run Workspace controls the ability to - you guessed it - run a workspace on FME Server. The Advanced option allows a user to access advanced job directives and the direct URL to run a workspace.
Access to the Jobs page allows the user to view the jobs they have run, or cancel any of their jobs that are currently running or in the queue. The Manage option allows them to view the full job history on FME Server and the ability to cancel any job, or remove any job from the history.
Schedules are one of the core functions FME Server provides. Access to each schedule can be controlled.
Repositories are a place to store and categorize workspaces. Each role or user can be given different permissions for every repository - download, read, publish, run, remove. Access permission is not necessary to run a workspace - only run permission on the applicable repository is required.
Version Control is a new feature in FME Server 2018.0, and it allows users to version the workspaces they have published to FME Server, either during publishing or by using the FME Server web interface. A user can be granted Access or Manage permissions.
Workspace Viewer is a new feature in FME Server 2018.0, and it allows a user to view published workspaces through the FME Server web interface. A user can be granted access to use this feature.
Publications are a subset of the FME Server Notification System. Different permissions - read, write (edit), remove - can be assigned for each publication.
Subscriptions are a subset of the FME Server Notification System. Different permissions - read, write (edit), remove - can be assigned for each subscription.
Topics are related to Notifications (Publications and Subscription). Different capabilities – read, write, publish, remove – can be assigned for each topic created.
Resources are files and datasets stored on FME Server. Different permissions – access, list, write, upload, remove – can be assigned to each resource.
Connections are predefined logins to either web services or databases. Each role or user can be given permission to manage the different connections stored in FME Server. With this permission, the user can create new definitions, and manage connections in the FME Server web interface.
Projects are created to manage a subset of FME Server resources, for example - workspace, schedules, publications, and subscriptions. Different permissions - Can View, Can Edit, Full Access - can be assigned to a user or role for each project.
Dashboards offer an easy way to view FME Server health using the FME Server web interface.
Engines & Licensing
The Engines & Licensing page concerns licensing FME Server, managing the number of active FME Server Engines, and the number of connected hosts.
Granting the permission for Security allows the role or user to create, enable, disable, and remove users and roles, as well as configuring for Active Directory.
System Cleanup tasks are defined in the FME Server web interface and help to manage temporary files and log files among other items.
Services are key items of functionality on FME Server. They are the different methods by which a workspace can be run and output data delivered. Each role or user can be allowed – or not – to use a particular service.