XMS Configuration Guide
19-1
19 U
SER
R
IGHTS
M
ANAGEMENT
The Vertigo Suite offers system administrators and workflow managers the possibility of
restricting access to some of the functionality on a per-user basis using User Rights
Management (URM).
Access rights
are controlled using the Xmedia Server and the
operations, tasks, and roles defined in Microsoft’s Authorization Manager.
Access control
is enforced through two different set of restrictions; category visibility and
asset type security. The first set of restrictions determine, for any given category, which
users are allowed to view the category and its contents via the Asset Browser. The second
set of restrictions determine, system-wide, upon which asset types a user is granted read,
write and delete access. In combining both sets of restriction, one can enforce access
control on a category and asset-type basis.
A typical use of URM is to have a set of templates that are “in progress”, and therefore
visible only to graphics staff, but not to be used from Xnews or Xbuilder.
Use of the Vertigo Suite’s URM is completely optional and it can be enabled or disabled
using the Xmedia Server Control Panel’s General page.
The following sections provide more details and instructions for configuring and using URM:
•
“Target audience and prerequisites for setting up URM” on page 19-2
•
“Overview of the Authorization Manager” on page 19-3
•
“Configuring the Policy Store in Active Directory” on page 19-8
•
“Configuring the Policy Store in an XML file” on page 19-22
•
“Setting up your user rights management system” on page 19-35
•
“Maintaining the Authorization Manager’s elements” on page 19-43
•
“Restricting access to asset categories” on page 19-49