Novell EDIRECTORY 8.8 SP3, Administration Manual, Page: 106 / 634

106 Novell eDirectory 8.8 Administration Guide
n
ov
do
cx (e
n)
11
Ju
ly 20
08
Creating a Role Object
Use the Create iManager Role Wizard to create a new rbsRole object. We recommend creating the
new rbsRole object in the same rbsCollection container where the other rbsRole objects reside (for
example, the Role-Based Services Collection container).
1 In Novell iManager, click the Configure button Description: Configure button .
2 Click Role Configuration > Create iManager Role .
3 Follow the instructions in the Create iManager Role Wizard.
See “Defining Custom RBS Tasks” on page 107 for information on adding members to roles.
Modifying the Tasks Associated with a Role
Each RBS role has a set of available tasks associated with it. You can choose which tasks are
assigned to a particular role, adding or removing tasks as necessary.
1
In Novell iManager, click the Configure button Description: Configure button .
2 Click Role Configuration > Modify iManager Roles .
3
To add or remove tasks from a role, click the Modify Tasks button Description: Modify Tasks
button to the left of the role you want to modify.
4 Add or remove tasks from the Assigned Task list.
5 Click OK .
Assigning RBS Role Membership and Scope
After you have defined the RBS roles needed in your organization, you can assign members to each
role. In doing so, you specify the scope in which each member can exercise the functions of the role.
The scope is the location or context in the eDirectory tree where this role can be performed.
A user can be assigned to a role in the following ways:
Š
Directly
Š
Through group and dynamic group assignments. If a user is a member of a group or a dynamic
group that is assigned to a role, then the user has access to the role.
Š Through organizational role assignments. If a user is an occupant of a organizational role that is
assigned a role, then the user has access to the role.
Š
Through container assignment. A user object has access to all of the roles that its parent
container is assigned. This could also include other containers up to the root of the tree.
A user can be associated with a role multiple times, each with a different scope. You can also assign
the same task to multiple members.
To assign role membership and scope:
1 In Novell iManager, click the Configure button Description: Configure button .
2
Click Role Configuration > Modify iManager Roles .
3 To add or remove members from a role, click the Modify Members button Description: Modify
Members button to the left of the role you want to modify.
4 In the Name field, specify an object name (a User, Group, or Container object) and context.