Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 124 / 1026

Figure 21: Assigning Roles Defined in Domain "global”
The user role “r1” is defined in global domain, but the user has access to only a subdomain
d1 and therefore gets a the global role “r1.”
Figure 22: Assigning Roles Defined in Domain "global” to Subdomain Only
The user is defined in domain “global” but has access to subdomains only. The user is a
“Domain Administrator” in subdomain “d1,” but has a custom role r1 for subdomain “d2.”
Configuring Roles
To assign a role to the new administrator, select the Permissions tab and choose a role
for the new administrator. When you assign a role to an NSM administrator, the
administrator can perform the predefined system activities specified in that role.
You can select a default or custom role for that administrator. NSM includes default roles
for common job responsibilities:
•
Domain Administrator—Can perform all activities in the domain.
• Read-Only Domain Administrator—Can perform all read-only activities in the domain.
• IDP Administrator—Can perform all IDP activities. All other activities are excluded.
•
Read-Only IDP Administrator—Can perform all read-only IDP activities.
Copyright © 2010, Juniper Networks, Inc. 74
Network and Security Manager Administration Guide