BMC User Administration and Provisioning

The architecture of BMC User Administration and Provisioning is designed for cross-platform user management and integration with mainframe security systems. The core components include the Administration Console, which provides a GUI for managing users, groups, and access rights. Agents are deployed on each supported platform (Windows, UNIX, z/OS) and interface with the respective security systems (RACF, ACF2, Top Secret).

The User Management Engine acts as the central processing unit, handling user provisioning, de-provisioning, and policy enforcement. Communication between the Administration Console and the agents typically occurs over established network protocols. The product utilizes databases for storing user profiles, access control lists, and configuration data.

The Administration Console also provides access to audit logs, which track user activities and system events. The product supports role-based access control (RBAC), allowing administrators to define roles and assign permissions. Encryption is used to protect sensitive data, such as passwords and configuration information.

The product's design emphasizes centralized control, automation, and integration to streamline user lifecycle management and enhance security.