Oce im5530, Network Administration Manual

Page: 40 / 78

1 Setting up Network Server
38 Setting up Role Based Access Control
Setting up Role Based Access Control
When you enable the Role Based Access Control for the User Management Setting, you must
configure the Role Based Access Control in the LDAP server.
When you enable the Role Based Access Control, you can restrict the operations for each regis-
tered user using LDAP server.
To manage the Role Based Access Control, add the following schema setting in each user infor-
mation registered in the LDAP server.
Example:
eBMUserRole = “+C+Em+Fl+Fx+iF”
Copy, Email, Save as file, Fax, and Internet Fax are allowed for the user.
eBMUserRole = “-Em-Fx”
Others than Email and Fax are allowed for the user.
eBMUserRole = “ “
All functions except the administrative functions are allowed for the user.
eBMUserRole = “*”
All functions except the administrative functions are allowed for the user.
(Same as eBMUserRole = “ “)
y “+” and “-” cannot be entered in the same user.
y “*” must be entered into a head.
Configuring Role Based Access Control for Windows Server 2003
This section describes how to set up the Role Access Based Control for a Windows Server 2003
as an example. Please set up the server in your accountability.
To configure the schema for Role Based Access Control, you must create a schema first.
OID 1.3.6.1.4.1.1129.2.100.1.1
Attribute Name eBMUserRole
Attribute Type Unicode string
Max 256
Value C: Copy
Em: Email
Fl: Save as file
P: Print
B: Store to e-Filing
Fx: Fax
iF: Internet Fax
FC: Address Book registration
Template registration
User settings (can be set from the [USER] button in
the [USER FUNCTION] button
*: All above functions
Also you can use the following prefixes:
+:
Prefix for permitting
-: Prefix for prohibiting