Novell EDIRECTORY 8.8 - GUIDE, Manual

Page: 102 / 574

102 Novell eDirectory 8.8 Administration Guide
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
The RBS objects reside in the eDirectory tree as depicted in the following figure.
Figure 3-1
RBS Objects in the eDirectory Tree
3.3.1 Defining RBS Roles
RBS roles specify the tasks that users are authorized to perform. Defining an RBS role includes
creating an rbsRole object and specifying the tasks that the role can perform and the User, Group, or
container objects that can perform those tasks. In some cases, Novell iManager plug-ins (product
packages) provide predefined RBS roles that you can modify.
The tasks that RBS roles can perform are exposed as rbsTask objects in your eDirectory tree. These
objects are added automatically during the installation of product packages. They are organized into
one or more rbsModules, which are containers that correspond to the different functional modules of
the product.
rbsBook A leaf object that containing a list of pages assigned to the book. An
rbsBook can be assigned to one or more Roles and to one or more Object
class types.
rbsBook objects are located only in rbsModule containers.
rbsScope A leaf object used for ACL assignments (instead of making assignments
for each User object). rbsScope objects represent the context in the tree
where a role will be performed and are associated with rbsRole objects.
They inherit from the Group class. User objects are assigned to an
rbsScope object. These objects have a reference to the scope of the tree
that they are associated with.
This object is dynamically created when needed, then automatically
deleted when no longer needed. They are located only in rbsRole
containers.
WARNING: Never change the configuration of a Scope object. Doing so
will have serious consequences and could possibly break the system.
Object Description
Role-Based Services
in eDirectory
Collection
Module
Role
Task
Book
Scope