Novell EDIRECTORY 8.8 SP3, Руководство администратора, Страница: 105 / 634

Managing Objects 105
n
ov
do
cx (e
n)
11
Ju
ly 20
08
The RBS objects reside in the eDirectory tree as depicted in the following figure.
Figure 3-1
RBS Objects in the eDirectory Tree
3.3.1 Defining RBS Roles
RBS roles specify the tasks that users are authorized to perform. Defining an RBS role includes
creating an rbsRole object and specifying the tasks that the role can perform and the User, Group, or
container objects that can perform those tasks. In some cases, Novell iManager plug-ins (product
packages) provide predefined RBS roles that you can modify.
The tasks that RBS roles can perform are exposed as rbsTask objects in your eDirectory tree. These
objects are added automatically during the installation of product packages. They are organized into
one or more rbsModules, which are containers that correspond to the different functional modules of
the product.
For information on assigning members to a role, see “Assigning RBS Role Membership and Scope”
on page 106 .
Š
“Creating a Role Object” on page 106
Š “Modifying the Tasks Associated with a Role” on page 106
Š
“Assigning RBS Role Membership and Scope” on page 106
Š
“Deleting a Role-Based Services Object” on page 107
rbsScope A leaf object used for ACL assignments (instead of making assignments
for each User object). rbsScope objects represent the context in the tree
where a role will be performed and are associated with rbsRole objects.
They inherit from the Group class. User objects are assigned to an
rbsScope object. These objects have a reference to the scope of the tree
that they are associated with.
This object is dynamically created when needed, then automatically
deleted when no longer needed. They are located only in rbsRole
containers.
WARNING: Never change the configuration of a Scope object. Doing so
will have serious consequences and could possibly break the system.
Object Description
Role-Based Services
in eDirectory
Collection
Module
Role
Task
Book
Scope