analytics/webapps/p2pd/WEB-INF/cm/CMUpgradeScript_cognos_roles16_update.xml

<?xml version="1.0" encoding="UTF-8"?>
<!--
 Licensed Materials - Property of IBM

 BI and PM: CM

 (C) Copyright IBM Corp. 2013, 2015

 US Government Users Restricted Rights - Use, duplication or disclosure
 restricted by GSA ADP Schedule Contract with IBM Corp.
-->
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/" xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:bus="http://developer.cognos.com/schemas/bibus/3/">
	<SOAP-ENV:Header>
		<bus:biBusHeader/>
	</SOAP-ENV:Header>
	<SOAP-ENV:Body>
		<cm:update xmlns:cm="http://developer.cognos.com/schemas/bibus/3/">
			<objects xsi:type="SOAP-ENC:Array" SOAP-ENC:arrayType="cm:baseClass[1]">
				<!-- Tenant Administrators role -->
				<item xsi:type="cm:role">
					<searchPath xsi:type="cm:stringProp">
						<value xsi:type="xsd:string">CAMID("::Tenant Administrators")</value>
					</searchPath>
					<policies xsi:type="cm:policyArrayProp">
						<value xsi:type="SOAP-ENC:Array" SOAP-ENC:arrayType="cm:policy[]">
							<item xsi:type="cm:policy">
								<securityObject xsi:type="cm:baseClass">
									<searchPath xsi:type="cm:stringProp">
										<!-- Only System Admin has all the permissions to Tenant Admin role -->
										<value xsi:type="xsd:string">CAMID("::System Administrators")</value>
									</searchPath>
								</securityObject>
								<permissions xsi:type="SOAP-ENC:Array" SOAP-ENC:arrayType="cm:permission[]">
									<item xsi:type="cm:permission">
										<name xsi:type="xsd:string">read</name>
										<access xsi:type="cm:accessEnum">grant</access>
									</item>
									<item xsi:type="cm:permission">
										<name xsi:type="xsd:string">setPolicy</name>
										<access xsi:type="cm:accessEnum">grant</access>
									</item>
									<item xsi:type="cm:permission">
										<name xsi:type="xsd:string">traverse</name>
										<access xsi:type="cm:accessEnum">grant</access>
									</item>
									<item xsi:type="cm:permission">
										<name xsi:type="xsd:string">write</name>
										<access xsi:type="cm:accessEnum">grant</access>
									</item>
									<item xsi:type="cm:permission">
										<name xsi:type="xsd:string">execute</name>
										<access xsi:type="cm:accessEnum">grant</access>
									</item>
								</permissions>
							</item>
						</value>
					</policies>
				</item>
			</objects>
			<options xsi:type="cm:updateOptions">
				<ignoreInvalidObjectReference>true</ignoreInvalidObjectReference>
			</options>
		</cm:update>
	</SOAP-ENV:Body>
</SOAP-ENV:Envelope>