You can manage permissions through roles. Managers can belong to any number of roles. Managers inherit all permissions enabled for any roles they belong to.
-
From the left navigation menu, select Administrators and then Roles.
The following details are displayed for each role:
-
Name. The name of the role.
-
Managers. The managers who are currently assigned this role.
-
Managers Count. The number of managers who have this role.
-
-
To see (and edit) the permissions enabled for the role, click the role.
-
From the left navigation menu, select Administrators and then Roles.
-
Click Create roles.
-
In the Add Role dialog box, enter a name for the role and enable the permissions you want to include in the role:
-
Enable a permission by clicking it's icon.
-
Toggle whole rows and columns on and off by clicking the row or column heading. For example, click Create to add Create permission for all realms.
-
-
If you want to associate authentication provider group(s) with the role, enter each group in the format <groupname>@<domain> in the AD/LDAP groups field.
Users who belong to groups that are associated with the role will be able to log into VMS using their LDAP user name and password. They will be authorized based on the role(s) associated with their group.
To enter a group, start typing the initial characters and then select an autocomplete option.
To enter more than one group, enter the first group, then enter a comma and then enter another group. Each group is entered into the field with a removal button (
). You can use the remove button to remove any group.Each group can be any group on any connected LDAP-based provider, including Active Directory. Groups can be associated with multiple roles and vice versa.
-
When you're done, click Create.
The role is added.
Tip
To assign the role to a manager, update the manager.
Whenever you modify a role and change the permission set enabled for the role, you automatically update the inherited permissions of all the managers who have the role.
-
From the left navigation menu, select Administrators and then Roles.
-
Click
to open the Actions menu for the role you want to modify and select Edit. -
Make changes as needed (see Adding Roles).
-
Click Update.
The role is modified.
Caution
Deleting a role can remove permissions from managers who have the role.
To manage roles via the CLI, use the following commands.
|
To do this task... |
Use this command... |
|---|---|
|
Assign manager to role |
|
|
Remove manager from role |
|
|
Display roles |
|
|
Display details of specific role |
|
|
Add a role |
|
|
Delete a role |
|
|
Assign permissions and/or LDAP groups to a role. |
|
|
Remove permissions from a role. |
Comments
0 comments
Article is closed for comments.