Red Hat DIRECTORY SERVER 8.0, Administration Manual, Page: 131 / 552

Managing Roles Using the Console
113
5.1.2. Managing Roles Using the Console
This section contains the following procedures for creating and modifying roles:
•
Section 5.1.2.1, “Creating a Managed Role”
•
Section 5.1.2.2, “Creating a Filtered Role”
•
Section 5.1.2.3, “Creating a Nested Role”
•
Section 5.1.2.4, “Viewing and Editing an Entry's Roles”
•
Section 5.1.2.5, “Modifying a Role Entry”
•
Section 5.1.2.6, “Making a Role Inactive”
•
Section 5.1.2.7, “Reactivating a Role”
•
Section 5.1.2.8, “Deleting a Role”
When a role is created, determine whether a user can add themselves or remove themselves from the
role. See
Section 5.1.4, “Using Roles Securely”
for more information about roles and access control.
5.1.2.1. Creating a Managed Role
Managed roles have an explicit enumerated list of members. Managed roles are added to entries by
adding the
nsRoleDN
attribute to the entry.
To create and add members to a managed role, do the following:
1. In the Directory Server Console, select the
Directory
tab.
2. Browse the tree in the left navigation pane, and select the parent entry for the new role.
3. Go to the
Object
menu, and select
New > Role
.
Alternatively, right-click the entry and select
New > Role
.
The
Create New Role
dialog box is displayed.
4. Click
General
in the left pane. Type a name for the new role in the
Role Name
field.
The role name is required.
5. Enter a description of the new role in the
Description
field.
6. Click
Members
in the left pane.
A search dialog box appears briefly.
7. In the right pane, select Managed Role. Click
Add
to add new entries to the list of members.
The standard
Search users and groups
dialog box appears.
8. In the
Search
drop-down list, select
Users
from the
Search
drop-down list, then click
Search
.
Select one of the entries returned, and click
OK
.
9. After adding all of the entries, click
OK
.