AMX NXA-WAPZD1000, Operation/Reference Manual, Page: 84 / 154

Configure Tab
80 NXA-WAPZD1000 ZoneDirector Smart WLAN Controller
6.
If you want to create additional roles with different policies, repeat this procedure.
Controlling Guest Pass Generation Privileges
To disable the guest pass generation privilege granted to all basic “default” role users:
1.
Go to Configure > Roles.
2.
When the Roles and Policies page appears, a table lists all existing roles, including Default. Click Edit (in
the Default role row) to open the Editing window (FIG. 27).
3.
In the Policies options, clear the Allow Guest Pass Generation check box.
4.
Click OK to save your settings. Users with “default” roles no longer have guest pass generation
privileges.
FIG. 27 Roles - Editing
Roles - Editing
Name: Enter a name for this role.
Description: Enter a description for this role
Group Attributes: Fill in this field only if you are creating a user role based on Group
attributes extracted from an Active Directory or LDAP server (for more
information, please refer to the
Group Extraction section on page 99).
Enter the User Group name here. Active Directory/LDAP users with the
same group attributes are automatically mapped to this user role.
Policies:
Allow All WLANs: You have two options: (1) Allow Access to all WLANs, or (2) Specify
WLAN Access. If you select the second option, you must specify the
WLANs by clicking the check box next to each one. This option requires
that you create WLANs prior to setting this policy. For more information,
please refer to the
Creating a WLAN section on page 53.
Guest Pass: If you want users with this role to have the permission to generate guest
passes, enable this option.
Administration: This option allows you to create a user role with NXA-WAPZD1000
administration privileges - either full access or limited (read only) access.
When creating a guest pass generator Role, you must ensure that this Role is given
access to the Guest WLAN. If you create a Role and allow guest pass generation, but
do not allow the Role access the relevant WLAN, members of the “Guest Pass
Generator” Role will still be unable to generate guest passes for the Guest WLAN.