6.2 RBS Configuration

The RBS Configuration task provides complete control over RBS objects. It is a central place for managing and configuring RBS objects. You can list and modify RBS objects by type. The task also gives you useful information about the RBS system, such as the number of modules in a collection, how many are installed, how many are not installed, and how many are outdated. Some tasks let you operate on multiple objects simultaneously. For example, you can associate or disassociate multiple members from a role at the same time.

From the Configure view, select Role-Based Services > RBS Configuration to open the RBS Configuration page in the Content frame.

The page includes two tabs:

iManager 2.x Collection: Displays current RBS collections.

iManager 1.x Collections: Displays older RBS collections that you can either delete or migrate to iManager 2.x. If you select Migrate, a wizard steps you through the migration process.

iManager displays only those collections you own, and includes the following information about each collection:

  • Module: Indicates the number of modules on the Web server that you are logged in to.

  • Installed: Indicates the number of modules that are currently installed.

  • Outdated: Indicates the number of outdated modules currently installed.

  • Not-Installed: Indicates the number of modules that are available but not installed.

To work with a particular collection, select it from the list. This opens a collection-specific view, as shown in Figure 6-2.

Figure 6-2 Working with RBS collections in iManager

The remainder of this section describes the various tabs in the RBS Collection page as well as the other RBS-related tasks in the Role Based Services category.

6.2.1 The Role Tab

The RBS Collection Role tab lets you manage the RBS roles in the collection. From this tab you can do the following:

NOTE:To select a role, select the checkbox to the left of the role name.

Create a New Role

To create a new role in the collection:

  1. In the Role tab, select New > iManager Role.

  2. Complete the steps in the iManager Role Wizard.

    The wizard steps you through naming the role, assigning tasks and categories to the role, and assigning role members and scopes to the role.

Edit a Role

To edit an existing role in the collection:

  1. In the Role tab, select the role, then click Edit.

    The role's task list appears.

  2. Add or remove a task from this page as needed, then click OK.

Delete a Role

To delete a role in the collection:

  1. In the Role tab select the role, then click Delete.

    A message appears: This operation will delete all of the selected roles. Do you want to continue?

  2. Click OK to delete the role.

Set a Member Association

To add a member to an existing role:

  1. In the Role tab select the role, then select Actions > Member Associations.

  2. Provide the required member information, then click Add.

    • Name: Specify, or use the Object Selector to find, the desired object to be a role member.

    • Scope: Specify, or use the Object Selector to find, the container that defines the scope within which this member can perform the role.

  3. In the members list, specify how you want rights related to this role assigned to the member, then click OK.

    • Assign Rights: Instructs eDirectory to automatically grant the member rights necessary to perform the assigned role. When not selected, the member is assigned the role but might not have rights to perform all tasks associated with the role. The member’s rights assignments are handled separately.

    • Inheritable: Select subtree to indicate that the member’s scope includes all sub-containers in the specified context. Select base object to indicate that the member can perform the role only in the specified container.

NOTE:If a user is a collection owner, and has a member association set, then he/she can manage all the RBS objects within the defined scope. For a list of RBS objects in eDirectory and their description, see RBS Objects in eDirectory.

Assign a Category

To add a category assignment to an existing role:

  1. In the Role tab, select the role, then select Actions > Category Assignment.

    The Category Assignment page appears.

  2. Select a category, then click the right-arrow to assign it to the role.

  3. Click OK.

Add a Description to a Role

To add a description to an existing role:

  1. In the Role tab, select the role and click Actions > Description.

  2. Specify the description in the text box, then click OK.

6.2.2 The Task Tab

A task is a plug-in that performs a distinct management function, such as creating a user or setting a password. iManager lists the tasks by group in the navigation area on the left side of the window.

The RBS Collection Task tab lets you do the following operations:

Creating a New Task

To create a new task:

  1. In the Task tab, select New > iManager Task.

  2. Complete the steps in the Create iManager Task Wizard.

    The wizard steps you through providing the necessary detail about the new task you are creating.

For information on creating tasks in the Plug-in Studio, see Creating a New Task from Plug-In Studio.

Deleting a Task

To delete an existing task:

  1. In the Task tab, select the task, then select Delete.

    A message appears: This operation will delete all of the selected tasks. Do you want to continue?

  2. Click OK.

Editing the Role Assignment of a Task

To edit the list of roles to which a task is assigned:

  1. In the Task tab, select the task, then select Actions > Role Assignment.

  2. On the Edit Role Assignment page, add or remove roles from the Assigned Roles field, then click OK.

Adding a Description to a Task

To add a description to an existing task:

  1. In the Task tab, select the task, then select Actions > Description.

  2. Specify the description in the text box, then click OK.

6.2.3 The Property Book Tab

A property book displays the attributes of a specific object type that you can modify. These properties are of an object or set of objects of the same type.

Property books can be assigned to roles and appear in the list of tasks for a role. For example, a property book that modifies the attributes of User objects might have a page that lets you to specify a user's login script. Another page could let you change a user's e-mail address and telephone number.

Property book pages are similar to tasks. However, they are for displaying and modifying attributes in a single view. For a more complex, wizard-like UI, you should create a task.

The RBS Collection Property Book tab lets you perform the following operations:

Creating a New Property Book

To create a new property book:

  1. In the Property Book tab, select New.

  2. Complete the steps in the Create Property Book Wizard.

    The wizard steps you through providing the necessary detail for the property book you are creating.

    IMPORTANT:In iManager, some characters have special significance and must be escaped with the backslash (\) character. For more information, see Special Characters.

Deleting a Property Book.

To delete a property book:

  1. Under the Property Book tab, select the property book, then select Delete.

    A message appears: This operation will delete all of the selected property books. Do you want to continue?

  2. Click OK.

Editing the Role Assignment in a Property Book

To modify the list of roles to which a property book is assigned:

  1. Under the Property Book tab, select the property book, then select Actions > Role Assignment.

  2. On the Edit Role Assignment page, add or remove roles from the Assigned Roles field, then click OK.

Modifying the Page List for a Property Book

To modify the attribute pages associated with a property book:

  1. Under the Property Book tab, select the property book, then select Actions > Page List.

  2. On the Edit Page List page, add or remove roles from the Assigned Pages field. To change the order of the pages, select a page and click Move Up or Move > Down buttons.

Modifying the Object Type Assignment of a Property Book

To modify the list of object types associated with a property book:

  1. Under the Property Book tab, select the property book, then select Actions > Object Type.

  2. On the Edit Object Type page, add or remove roles from the Assigned Object Types field, then click OK.

Adding/Modifying the Description of a Property Book

To add/modify a description to an existing task:

  1. In the Property Book tab, select the property book, then select Actions > Description.

  2. Specify/modify the description in the text box, then click OK.

Defining/Modifying a Preferred Object Selection Method for a Task of a Property Book

To define/modify a preferred object selection method for an existing task:

  1. Under the Property Book tab, select the property book, then select Actions > Target Chooser Mode.

  2. From the Mode list, select the appropriate mode: single, multiple, simple, or advanced and click OK.

    A successful message is displayed. Click OK.

    NOTE:For the changes to iManager Base Content module to take effect, restart Tomcat.

6.2.4 The Module Tab

The Module page lists the RBS modules currently installed on a selected collection. Each module contains RBS property books and tasks. From this page, you can add (if you want to create a custom property book) and delete modules, and also type a description for a selected plug-in module.

The RBS Collection Module tab lets you perform the following operations:

Adding a New Plug-in Module

To add a new plug-in module:

  1. In the Module tab, select New.

  2. Specify the RBS module name and a destination context, then click OK.

    iManager displays a message indicating the module has been added.

Deleting an RBS Module

To delete an existing plug-in module:

  1. In the Module tab, select a module to delete, then select Delete.

  2. Click OK to confirm the module deletion.

Adding a Description

To add a description to an existing plug-in module:

  1. In the Module tab, select a module, then select Actions > Description.

  2. Specify the module description, then click OK.

6.2.5 The Category Tab

Category tab groups the related roles and tasks together. The RBS Collection Category tab lets you perform the following operations:

Adding a New Category

To add a description to an existing plug-in module:

  1. In the Category tab, select New.

    This launches the Create Category Wizard.

  2. Specify category name and description (optional), then click Next.

  3. Select the roles to be associated with the new category, then click Next.

  4. Review the new category summary, then click Finish.

Deleting a Category

To delete an existing category:

  1. In the Category tab, select a module to delete, then select Delete.

  2. Click OK to confirm the category deletion.

Adding a Description

To add or modify the description of an existing category:

  1. In the Category tab, select a category, then select Actions > Description.

  2. Specify the category description, then click OK.

6.2.6 Plug-In Studio

Plug-In Studio offers a quick and easy way to streamline the tasks that you do several times a day. Use Plug-in Studio to dynamically create tasks for your most frequently used operations. You can also edit and delete tasks here.

For example, to modify a user, instead of selecting Modify Object, you can create a dynamic UI to edit only the attributes you have selected, such as first name or title. Data is stored in the TOMCAT_HOME/webapps/nps/portal/modules/custom directory.

NOTE:While using the Plug-In Studio, NetIQ recommends that you do not run multiple iManager servers using the same RBS. The Plug-In Studio does not correctly update the plug-ins in eDirectory.

From the Plug-in Studio task, you can perform the following operations:

Creating a New Task from Plug-In Studio

To create a new task with Plug-In Studio:

  1. In the Configure view, select Role-Based Services > Plug-in Studio.

  2. Select New.

    The Task Builder appears to help you build custom tasks and property pages.

    NOTE:If a new page is added to the book with certain attributes, rights to these attributes are not granted by default. You must remove the role member and scope and add them back to grant rights.

  3. Specify the object type and platform information, then click Next.

    Available classes: Specify the object class associated with the new task.

    Target device: Specify the platform on which the task is used. Typically, the default selection (Default) works fine.

    Plug-in type: Specify the type of task you are creating.

    Add Auxiliary Classes: Select this option to add aux class support to the task.

  4. In the Plug-in Fields screen, provide the necessary information, then click Install.

    When you click Install, iManager dynamically builds the task’s .xml file, .jsp file, and the Java files that execute the task, then it installs those files into the system.

    Attributes: Select an attribute to associate with the task from the list of available attributes.

    Double-click the attribute to move it to the Plug-in Fields field, using the default control.

    Controls: Displays the available controls for the attribute selected in the Attributes field.

    Double-click a control to move the current attribute to the Plug-in Fields field, using the selected control.

    Plug-in Fields: Displays each attribute/control currently associated with the task. From this field, you can remove attributes from the task, change the control associated with an attribute, and modify the control properties for the attribute.

    Plug-in Properties: Lets you specify a Plug-in ID, assign the task to an RBS collection, and assign the task to a Role. The role you assign determines where this task appears in the Roles and Tasks Navigation frame.

Editing a Task

To edit an existing plug-in with Plug-in Studio:

  1. In the Configure view, select Role-Based Services > Plug-in Studio.

  2. Select the task, then select Edit.

  3. Modify the settings described in Creating a New Task, then click Install.

    iManager displays a confirmation message indicating the plug-in was successfully created and installed.

Deleting a Task

To delete an existing plug-in with Plug-in Studio:

  1. In the Configure view, select Role-Based Services > Plug-in Studio.

  2. Select the plug-in from the list of installed custom plug-ins, then click Delete.

    A message appears: Are you sure you want to delete this plug-in?

  3. Click OK to delete the plug-in.

    iManager displays a confirmation message indicating the plug-in was successfully deleted.

Copying Custom Tasks

To copy an existing plug-in with Plug-in Studio:

  1. In the Configure view, select Role-Based Services > Plug-in Studio.

  2. Select the plug-in from the list of installed custom plug-ins, then click Actions > Copy.

  3. Specify a name for the copied plug-in, then click OK.

Exporting Custom Tasks

Use this task to export your custom tasks, making them deployable to other iManager servers.

  1. In the Configure view, select Role-Based Services > Plug-in Studio.

  2. Select the custom plug-in to export, then click Actions > Export.

Importing Custom Tasks

Use this task to deploy an exported custom tasks onto multiple iManager servers.

  1. In the Configure view, select Role-Based Services > Plug-in Studio.

  2. Select Actions > Import.

  3. Specify, or use the Object Selector to find, the RBS collection into which you want to import the custom plug-ins.

  4. Specify, or browse to, the NPM file that you previously exported.

  5. Click Import.

6.2.7 Editing Member Associations

There are two ways to associate members with roles:

  • Select a member, then assign it to a role within a scope as described in Set a Member Association.

  • Select a role, then assign members and a scope to it as described below.

To assign an existing role to a selected member

  1. In the Configure view, select Role Based Services > Edit Member Association.

  2. Specify, or use the Object Selector to find, a member, then click OK.

    A list appears displaying the roles to which this member is assigned.

  3. Specify a role and role scope to add to this member, then click OK.

    This data is saved to eDirectory. After login, the newly assigned role appears in the left column of the member who owns it.

6.2.8 Editing Owner Collections

Use this task to change the owner assigned to a collection.

  1. In the Configure view, select Role Based Services > Edit Owner Collections.

  2. Specify, or use the Object Selector to find, a collection owner, then click OK.

  3. Add or remove collections this person can own, then click OK.