Defining RBS Roles

RBS roles specify the tasks that users are authorized to perform. Defining an RBS role includes creating an rbsRole object and specifying the tasks that the role can perform and the User, Group, or container objects that can perform those tasks. In some cases, Novell iManager plug-ins (product packages) might provide a few predefined RBS roles that you can modify.

The tasks that RBS roles can perform are exposed as rbsTask objects in your eDirectory tree. These objects are added automatically during the installation of product packages. They are organized into one or more rbsModules, which are containers that correspond to the different functional modules of the product.

For information on assigning members to a role, see Assigning RBS Role Membership and Scope.

In This Section

• Creating an rbsRole Object
• Modifying the Tasks That rbsRole Objects Can Perform
• Deleting a Role Based Services Object

Creating an rbsRole Object

1. Click the Configure button .

2. Click Role Management > Create Role.

3. Enter a name for the role in the Role Name field.

4. Specify an rbsCollection to hold the object in the Collection field.

   rbsRoles can be created only in an rbsCollection container.

5. (Optional) Enter a description for the role in the Description field.

6. Click Next.

7. Specify the tasks you want assigned to this role > click Next.

8. Specify the name and context of the object (a User, Group, or Container object) you want this role to be associated with > click Add.

   You can add as many Users, Groups, or Containers as you want.

9. Click Next > select the checkbox next to the name of the object or objects you just added.

10. In the Scope Name field, specify the areas of the tree where the role can be performed > click Add.

    You can assign multiple objects to the same scope, or you can assign individual scopes for each object.

    Uncheck the Inheritable check box if you want this role to be performed only in this context. If this box is checked, any containers or groups under this context will inherit the ability to perform this role.

11. Repeat Step 9 and Step 10 for each object you added in Step 8.

12. Click Next > Done.

See Assigning RBS Role Membership and Scope for information on adding members to roles.

Modifying the Tasks That rbsRole Objects Can Perform

Each RBS role has a set of available tasks associated with it. You can choose which tasks are assigned to a particular role, adding or removing tasks as necessary.

1. Click the Configure button .

2. Click Role Management > Modify Role.

3. Click in the Task column of the role you want to modify.

4. Add or remove tasks from the Assigned Task list.

5. Click OK.

Deleting a Role Based Services Object

1. Click the Configure button .

2. Click Role Management > Delete RBS Object.

3. Specify the name and context of the RBS role you want to delete.

4. Click OK.