If you already configured the WPM and then found out that it is implemented in the ISC (What a bad idea!), then you have to unconfigure the WPM: # /opt/PolicyDirector/sbin/amwpmcfg -action unconfig -interactive Then unpack the iscwpm.war (/opt/PolicyDirector/java/export/pdwpm/iscwpm.war): # /opt/WebSphere/AppServer/java/bin/jar xvf /tmp/iscwpm.war Modify ibm-portal-security.xml: old: new: Repack the iscwpm.war (remove the copy of your original /tmp/iscwpm.war first) and put it into place again: # /opt/WebSphere/AppServer/java/bin/jar cvf /opt/PolicyDirector/java/export/pdwpm/iscwpm.war /tmp/* Reconfigure the WPM: # /opt/PolicyDirector/sbin/amwpmcfg -action config -interactive Then you can give your WPM Adminperson the role wpm-user within the ISC. Then he/she can see everything, but can only do changes in WPM. IBM link: http://www-01.ibm.com/support/docview.wss?rs=638&context=SSPREK&q1=6.1+role&uid=swg21307731&loc=en_US&cs=utf-8&lang=en