Symantec Security 5600 Series, Security 5400 Series,Clientless VPN 4400 Series, Administration Manual

Page: 430 / 861

429 Enabling remote access with clientless VPN
Using roles to assign rules to users
Assigning a parent to a role
To assign rules to multiple users or user groups, you can assign parents to roles and establish the
child/parent hierarchy. Therefore, any rule assigned to the parent role is automatically inherited by
the child role. Any rule assigned to the root role is inherited by all roles. You cannot remove the root
role.
Prerequisites
Complete the following tasks before beginning this procedure:
■
“Creating and assigning roles” on page 426
To assign a parent to a role
1 In the SGMI, in the left pane, under Policy, click Clientless VPN .
2 In the right pane, on the Roles tab, select the role to which you want to assign a parent, and then
click
Properties .
3 In the Clientless VPN Role Properties window, on the General tab, alongside Parent roles, click
Add .
4 In the Role Selection dialog box, select the parent role you want to add, and then click OK .
5 Click OK .
6
Optionally, do one of the following:
■
To save your configuration and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .
Related information
For further information related to this topic, see the following:
■
“Removing a parent from a role” on page 429
Removing a parent from a role
You can remove parents from configured roles. When you remove a parent role, the rules inherited
from the parent are removed as well. You cannot remove the root role.
Prerequisites
Complete the following tasks before beginning this procedure:
■
“Creating and assigning roles” on page 426
To remove a parent from a role
1 In the SGMI, in the left pane, under Policy, click Clientless VPN .
2
In the right pane, on the Roles tab, select the role from which you want to remove a parent, and
then click
Properties .
3 In the Clientless VPN Role Properties window, in the Parent roles group box, select the parent role
you want to remove, and then click
Remove .
4 Click OK .
5 Optionally, do one of the following:
■
To save your configuration and activate later, on the toolbar, click Save .
■
To activate your configuration now, on the toolbar, click Activate .
When prompted to save your changes, click Yes .