Resolution:
Description:
============
A OS account (user2) that did not create the TIBCO domain needs access to it so that the user2 can execute deployments via AppManage only. What are the minimum file privileges required in order to accomplish this?

Environment:
===========
Operating System(s): ALL
TIBCO Runtime Agent: ALL
TIBCO Administrator: ALL

Symptoms:
========
If the correct file permissions are not set then the following error may occur:

1) ... Error [SystemEnvironment] AESDKJ-0000 java.io.FileNotFoundException: /opt/tibco/tra/5.7/../domain/DomainHomes.properties (Permission denied)

2) Domain Name &ltDOMAIN> specified does not exist. Please make sure you have typed it correctly

3) com.tibco.sdk.MNestedException: "Operation error: when creating sink, /opt/tibco/tra/domain/&ltDOMAIN>/logs/Administrator.log(MFileSink)."/opt/tibco/tra/domain/&ltDOMAIN>/logs/Administrator.log (Permission denied)

Resolution:
==========
The user2 must be in the same OS group as the account(user1) that created the domain. For example user1 and user2 are in the tibco group.
The following are the mininmum file privileges required.

- &ltTRA_HOME>/5.x/bin/AppManage                                (requires group read,execute and write permissions)
- &ltTRA_HOME>/domain/&ltDOMAIN>/AdministrationDomain.properties  (requires group read permissions)
- &ltTRA_HOME>/domain/&ltDOMAIN>/AuthorizationDomain.properties   (requires group read permissions)
- &ltTRA_HOME>/domain/DomainHomes.properties                    (requires group read permissions)
- &ltTRA_HOME>/domain/&ltDOMAIN>/logs                             (requires group read and write permissions on this directory)
- &ltTRA_HOME>/domain/&ltDOMAIN>/logs/Administrator.log           (requires group read and write permissions even if AppManage is run from a client machine)
- &ltTRA_HOME>/domain/&ltDOMAIN>/logs/ApplicationManagement.log   (requires group read and permissions)

Note that the same file changes (except AppManage and DomainHomes.properties) will need to be carried out for each applicable domain.

What are the minimum file privileges required for an OS account to deploy using AppManage?