Novell EDIRECTORY 8.8 - GUIDE, Руководство пользователя

Страница: 103 / 574

Managing Objects 103
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
For information on assigning members to a role, see “Assigning RBS Role Membership and Scope”
on page 103 .
• “Creating a Role Object” on page 103
• “Modifying the Tasks Associated with a Role” on page 103
• “Assigning RBS Role Membership and Scope” on page 103
• “Deleting a Role-Based Services Object” on page 104
Creating a Role Object
Use the Create iManager Role Wizard to create a new rbsRole object. We recommend creating the
new rbsRole object in the same rbsCollection container where the other rbsRole objects reside (for
example, the Role-Based Services Collection container).
1 In Novell iManager, click the Configure button .
2
Click Role Configuration > Create iManager Role .
3 Follow the instructions in the Create iManager Role Wizard.
See “Defining Custom RBS Tasks” on page 104 for information on adding members to roles.
Modifying the Tasks Associated with a Role
Each RBS role has a set of available tasks associated with it. You can choose which tasks are
assigned to a particular role, adding or removing tasks as necessary.
1 In Novell iManager, click the Configure button .
2 Click Role Configuration > Modify iManager Roles .
3 To add or remove tasks from a role, click the Modify Tasks button to the left of the role you
want to modify.
4 Add or remove tasks from the Assigned Task list.
5
Click OK .
Assigning RBS Role Membership and Scope
After you have defined the RBS roles needed in your organization, you can assign members to each
role. In doing so, you specify the scope in which each member can exercise the functions of the role.
The scope is the location or context in the eDirectory tree where this role can be performed.
A user can be assigned to a role in the following ways:
• Directly
• Through group and dynamic group assignments. If a user is a member of a group or a dynamic
group that is assigned to a role, then the user has access to the role.
• Through organizational role assignments. If a user is an occupant of a organizational role that is
assigned a role, then the user has access to the role.
• Through container assignment. A user object has access to all of the roles that its parent
container is assigned. This could also include other containers up to the root of the tree.
A user can be associated with a role multiple times, each with a different scope. You can also assign
the same task to multiple members.