Juniper NETWORK AND SECURITY MANAGER, Руководство пользователя

Страница: 62 / 340

Table 11: Administrator Role Configuration Details (continued)
Your Action Function Option
Select General > Session
Options to apply the settings to
the role.
Specifies the maximum
session length, roaming
capabilities, and session
persistence. Session Options
Select General > UI Options to
apply the settings to the role.
Specifies customized settings
for the Secure Access device
welcome page for Odyssey
Access Client users mapped
to this role. UI Options
Delegated Users Settings > Roles > Delegate User Roles
Select the user roles in the
Non-members list and click
Add
if you only want to allow the
administrator role to manage
selected user roles
Specifies whether the
administrator can manage all
roles. Administrators can manage
ALL roles
Select an access option from
the drop-down list.
• Select Write All to specify
that members of the
administrator role can modify
all user role pages.
• Select Custom Settings to
allow you to pick and choose
administrator privileges
(Deny, Read, or Write) for the
individual user role pages.
Specifies which user role
pages the delegated
administrator can manage. Access
Delegated Users Settings > Roles > Delegate As Read-Only Role
Select the user role that you
want to allow the administrator
to view.
NOTE: If you specify both write
access and read-only access for
a feature, the Secure Access
device grants the most
permissive access.
Allows the administrator to
view the user roles, but not
manage. Administrator can view (but
not modify) ALL roles
Delegated Users Settings > Realms > Delegate User Realms
Select the user realm. If you only
want to allow the administrator
role to manage selected realms,
select those realms in the
Members list and click
Add .
Specifies whether the
administrator can manage all
user authentication realms. Administrator can manage
ALL realms
Copyright © 2010, Juniper Networks, Inc. 44
Configuring Secure Access Devices Guide