Netscape NETSCAPE DIRECTORY SERVER 6.1 - ADMINISTRATOR, Руководство администратора

Страница: 168 / 578

Using Roles
168 Netscape Directory Server Administrator’s Guide • August 2002
• Deleting a Role
When you create a role, you need to decide whether a user can add themselves or
remove themselves from the role. Refer to “Using Roles Securely,” on page 175 for
more information about roles and access control.
Creating a Managed Role
Managed roles allow you to create an explicit enumerated list of members.
Managed roles are added to entries by adding the
nsRoleDN
attribute to the entry.
To create and add members to a managed role:
1.
On the Directory Server Console, select the Directory tab.
2.
Browse the tree in the left navigation pane and select the parent entry for your
new role.
3.
Go to the Object menu and select New > Role.
You can also right click the entry and select New > Role.
The Create New Role dialog box is displayed.
4.
Click General in the left pane. Type a name for your new role in the “Role
Name” field.
The role name is required.
5.
Enter a description of the new role in the “Description” field.
6.
Click Members in the left pane.
A search dialog box appears briefly.
7.
In the right pane, select Managed Role. Click Add to add new entries to the list
of members.
The standard “Search users and groups” dialog box appears.
8.
In the Search drop-down list, select Users from the Search drop-down list, then
click Search. Select one of the entries returned and click OK.
9.
When you have finished adding entries to the role, click OK.
The new role appears in the right pane.