6.1.4 Configuring Assignments

Assignment is a relationship between a single Resource Pool and a User Role, which enables to configure one or more permissions under it.

Adding an Assignment

  1. On the home page of the console, click Access Control.

  2. In the access control pane, click Assignments.

  3. In the details pane, click Create.

  4. To create an assignment, you must select a User Role, Resource Pool, and provide a Description. This Description is shown to the users while listing their permissions.

  5. Click on Add and select a Permission. Configure the permission options using the wizard. For more information, see Section 6.1.5, Configuring Permissions.

  6. Click Create to add the new assignment.

  7. NOTE:After creating the assignment or permissions, you cannot modify the User Role and Resource Pool.

Modifying an Assignment

  1. On the home page of the console, click Access Control.

  2. In the access control pane, click Assignments.

  3. In the details pane, select the assignment you want to modify and then click the Edit icon on that row or click on the assignment you want to modify and Edit Assignment page is displayed on the right pane.

  4. Edit Description.

  5. Edit Priority.

  6. Click Save.

    • Priority is helpful to prioritize the assignments of the same Resource Pool and if one or more members are included in more than one User Role involved in these assignments.

      • For example: Consider that a Resource Pool (RP) is assigned to two User Roles UR1 and UR2, through the Assignments A1 (RP + UR1) and A2 (RP + UR2).

      • Members m1 and m2 are part of both User Roles.

      • A1 and A2 are configured to deliver the access with similar privileges on the target servers, but A2 has higher level of monitoring.

      • If A2 is expected to provide access to m1 and m2, with higher level of monitoring, A2 should have higher priority value over A1.

    • The assignment with highest priority value will authorize the access request.

    • The allowed values are - 1 to 99.

  7. Click the Edit icon in the Permissions pane that you want to modify.

  8. Click Save.

Deleting an Assignment

  1. On the home page of the console, click Access Control.

  2. In the Access Console pane, click Assignments.

  3. Select the assignment you want to delete.

  4. In the details pane, click Delete.

  5. Click Delete to delete the assignment and all child assignments.