Appboard/2.4/builder/system administration/roles: Difference between revisions

imported>Jason.nicholls
No edit summary
imported>Jason.nicholls
No edit summary
 
(34 intermediate revisions by 2 users not shown)
Line 3: Line 3:
The Role Assignment administration page provides an interface for the AppBoard administrator to view, add, delete, and assign roles to domains and users. This is specifically for roles managed within AppBoard, for LDAP managed roles refer to the LDAP Configuration page.
The Role Assignment administration page provides an interface for the AppBoard administrator to view, add, delete, and assign roles to domains and users. This is specifically for roles managed within AppBoard, for LDAP managed roles refer to the LDAP Configuration page.


[[File:appboard-2.4-roles.png|frame|link=|Role Assignment administration page]]
[[File:appboard-2.4-roles.png|frame|Role Assignment Administration Page]]
 


=== Managing Roles ===
=== Managing Roles ===


Roles marked with the orange padlock icon are locked from management on this page, they are either the special internal ''portalAdministrator'' role or LDAP managed roles.
Roles marked with the orange padlock icon are locked from management on this page such as the special internal ''portalAdministrator'' role.


Use the ''Add Role'' to add a new role, or select an existing role and the ''Delete Role'' button to delete it.
Use the ''Add Role'' to add a new role, or select an existing role and the ''Delete Role'' button to delete it.
Line 28: Line 27:
# Drag the role(s) from the ''Provisioned Roles'' to the ''Available Roles'' list. Note: if performing this at the user level with a role that was provisioned at the domain level it will not allow you to remove the assignment.
# Drag the role(s) from the ''Provisioned Roles'' to the ''Available Roles'' list. Note: if performing this at the user level with a role that was provisioned at the domain level it will not allow you to remove the assignment.


{{Note|It ''is'' possible to assign LDAP managed roles to non-LDAP managed domains and users, and it's also possible to assign AppBoard managed roles to LDAP managed domains and users.}}
{{Note|It is not possible to remove the assignment of an LDAP role which is already provisioned to a user. Though you can drag the role from Assigned to Available, it will return the next time LDAP is synchronized.}}

Latest revision as of 09:49, 31 January 2014

The Role Assignment administration page provides an interface for the AppBoard administrator to view, add, delete, and assign roles to domains and users. This is specifically for roles managed within AppBoard, for LDAP managed roles refer to the LDAP Configuration page.

Role Assignment Administration Page

Managing Roles

Roles marked with the orange padlock icon are locked from management on this page such as the special internal portalAdministrator role.

Use the Add Role to add a new role, or select an existing role and the Delete Role button to delete it.

Adding and deleting roles can also be performed from the Stack Assignment administration page.

Assigning Roles

Assigning roles is performed by:

  1. Select either a Domain or specific User from the Domain and Users selection.
  2. Drag roles from the Available Roles to the Provisioned Roles list.

Roles assigned to the domain are automatically inherited by all users within that domain.

Removing assignment is a similar operation:

  1. Select either a Domain or specific User from the Domain and Users selection.
  2. Drag the role(s) from the Provisioned Roles to the Available Roles list. Note: if performing this at the user level with a role that was provisioned at the domain level it will not allow you to remove the assignment.
Template-note.png
It is not possible to remove the assignment of an LDAP role which is already provisioned to a user. Though you can drag the role from Assigned to Available, it will return the next time LDAP is synchronized.