Create Secure Agent groups on the Runtime Environments page. After you create a Secure Agent group, you can rename or delete the group, add and remove Secure Agents, and change group permissions. You can also enable services and connectors for the group.
Tip: Click the refresh icon next to New Runtime Environment to refresh the page before performing any actions on Secure Agent groups.
You can complete the following tasks:
Create a Secure Agent group.
To create a Secure Agent group, click New Runtime Environment and enter a name and optionally a description for the group. After you create a group, you can add Secure Agents to the group.
Note: If you use multi-byte characters in the Secure Agent group name and you create the group in a cloud-hosted environment, verify that the environment also supports these characters.
Edit Secure Agent group properties.
To rename a Secure Agent group or to add or update the description, expand the Actions menu, select Edit Environment Properties, and complete the fields in the dialog box. Informatica Intelligent Cloud Services updates the group name in all services that use the group.
Enable or disable specific Informatica Intelligent Cloud Services and connectors for a Secure Agent group.
To enable or disable services for a Secure Agent group, expand the Actions menu and select Enable or Disable Services, Connectors. On the Services tab, select the services to enable or disable. You can enable or disable any service that your organization is licensed to use.
Note: Before you disable a service, verify that no connection, task, or process that uses the group as the runtime environment requires the service. If a connection, task, or process has a Secure Agent group selected as the runtime environment and you disable a required service, the task or process cannot run. Similarly, if a feature has a Secure Agent group selected as the runtime environment and you disable a required service, the feature cannot be used.
To enable or disable connectors, expand the Actions menu and select Enable or Disable Services, Connectors. On the Connectors tab, select the connectors to enable or disable. You can enable or disable any connector that you organization is licensed to use.
To enable or disable additional services such as Self-Hosted Git Repo, expand the Actions menu and select Enable and Disable Services and Connectors. On the Additional Services tab, select the services to enable or disable. You can enable or disable any service that your organization is licensed to use.
Add Secure Agents to a group.
To add Secure Agents to a group, expand the Actions menu and select Add or Remove Secure Agents. You can add any agent that is in the Unassigned Agents group on the Runtime Environments page.
Alternatively, you can add a new Secure Agent to an existing group by setting the InfaAgent.GroupName property in the infaagent.ini file before you register the agent. When you add a Secure Agent to a Secure Agent group, the Secure Agent inherits the services and connectors that are configured for the Secure Agent groups.
When you add more than one Secure Agent to a Secure Agent group, all agents must meet the following requirements:
- All of the agents must be of the same type, for example, all local agents or all agents that run on Amazon EC2 machines.
- Each Secure Agent must be configured to connect to the same external systems and have access to files such as libraries, initialization files, and JAR files.
- Each Secure Agent must have access to the files used in tasks. Ensure that all files used in a task are available in a shared location.
Remove Secure Agents from a group.
To remove Secure Agents from a group, expand the Actions menu and select Add or Remove Secure Agents. When you remove an agent from a group, Informatica Intelligent Cloud Services adds it to a group named "Unassigned Agents."
You can remove an agent from a Secure Agent group if the group is not used as the runtime environment for a connection or task. If the group is used, you can remove an agent if it is not the only agent in the group.
Delete a Secure Agent group.
To delete Secure Agent group, expand the Actions menu and select Delete. You can delete a Secure Agent group if it does not contain any Secure Agents.
If the Secure Agent group is associated with an advanced configuration and the advanced cluster is running, you must stop the cluster and associate the configuration with a different runtime environment before you can delete the group.
Share or unshare a Secure Agent group.
If you are the administrator of a parent organization, you can share a Secure Agent group so that the sub-organizations can use it. You can unshare a group if it is not used in a connection or task. From the Actions menu associated with the group, choose Share Secure Agent Group or Unshare Secure Agent Group.
Change permissions for a Secure Agent group.
To change permissions for a Secure Agent group, expand the Actions menu and select Permissions. You can define permissions for a Secure Agent group for each user group in your organization.
You can set the following permissions:
Permission
Description
Read
View details about the Secure Agent group and use the Secure Agent group in a task.
Update
Edit the Secure Agent group.
Delete
Delete the Secure Agent group.
Change
Change permissions for the Secure Agent group.
Adding a Secure Agent to a group
You can add any available Secure Agent to a Secure Agent group. Available agents appear in the "Unassigned Agents" group on the Runtime Environments page. You cannot add a Secure Agent to a group if the agent has already been added to another group. When you add a Secure Agent to a group, the Secure Agent inherits all the services and connectors that are enabled for the group.
1In Administrator, select Runtime Environments.
2Expand the Actions menu for the Secure Agent group, and select Add or Remove Secure Agents.
3In the Secure Agents list, enable the checkbox for the Secure Agents that you want to add to the group.
If the agent you want isn't listed, that means it is currently assigned to another group. You must remove an agent from a group before you can add it to a different group.
If there are many agents in the list, use the Find box to quickly locate an agent.
4Click OK.
Adding a new Secure Agent to an existing group
You can add a Secure Agent to an existing Secure Agent group when you install the agent. To add a Secure Agent to an existing group, add the InfaAgent.GroupName property to the infaagent.ini file before you register the agent. When you add a Secure Agent to a group, the Secure Agent inherits all the services and connectors that are enabled for the group.
1Install the Secure Agent.
2On Windows, when you are prompted to register the agent, open Windows Services and stop the agent.
On Linux, when the installation program finishes, do not start the agent.
3Open <Secure Agent installation directory>/apps/agentcore/conf/infaagent.ini in a text editor.
4Add the following property and save the file:
InfaAgent.GroupName=<Secure Agent group name>
5Start the agent.
6Register the agent.
Informatica Intelligent Cloud Services adds the Secure Agent to the group you specify in the InfaAgent.GroupName property instead of a new group.
Removing a Secure Agent from a group
You can remove an agent from a Secure Agent group if the group is not used in a connection or task. If the group is used in a connection or task, you can remove an agent if it is not the only agent in the group. When you remove a Secure Agent from a group, Informatica Intelligent Cloud Services adds it to a group named "Unassigned Agents."
1In Administrator, select Runtime Environments.
2Expand the Actions menu for the Secure Agent group, and select Add or Remove Secure Agents.
3In the list of Secure Agents, clear the check mark next to the agents that you want to remove from the group.
4Click OK.
The Secure Agents that were removed appear in the "Unassigned Agents" group on the Runtime Environments page.
