Red Hat DIRECTORY SERVER 8.0, Administration Manual

Page: 133 / 552

Managing Roles Using the Console
115
NOTE
The
nsRoleDN
attribute is an operational attribute and must be explicitly requested in the
search command in the list of search attributes. For example:
ldapsearch ... args ... “(uid=scarter)” \* nsRole nsRoleDN
The Directory Server Console automatically shows the
nsRoleDN
attribute.
5.1.2.3. Creating a Nested Role
Nested roles are roles that contain other roles. Before it is possible to create a nested role, another
role must exist. When a nested role is created, the Console displays a list of the roles available for
nesting. The roles nested within the nested role are specified using the
nsRoleDN
attribute.
To create and add members to a nested role, do the following:
1. Create a new role, as in
Section 5.1.2.1, “Creating a Managed Role”
.
2. Click
Members
in the left pane.
A search dialog box appears briefly.
3. In the right pane, select
Nested Role
.
4. Click
Add
to add roles to the list. The members of the nested role are members of other existing
roles.
The
Role Selector
dialog box opens.
5. Select a role from the
Available roles
list, and click
OK
.
6. Click
OK
to save the new role.
The new role appears in the right pane.
NOTE
The
nsRoleDN
attribute is an operational attribute and must be explicitly requested in the
search command in the list of search attributes. For example:
ldapsearch ... args ... “(uid=scarter)” \* nsRole nsRoleDN
The Console will automatically show the
nsRoleDN
attribute.
5.1.2.4. Viewing and Editing an Entry's Roles
To view or edit a role associated with an entry from the Console, do the following:
1. In the Directory Server Console, select the
Directory
tab.
2. In the left navigation pane, browse the tree, and select the entry for which to view or edit a role.