User manual NOVELL IMANAGER 2.7.3 ADMINISTRATION

[. . . ] novdocx (en) 22 June 2009 AUTHORIZED DOCUMENTATION Administration Guide Novell® 2. 7. 3 iManager September 30, 2009 www. novell. com Novell iManager 2. 7. 3 Administration Guide novdocx (en) 22 June 2009 Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. [. . . ] Create a New Role To create a new role in the collection: 1 In the Role tab, select New > iManager Role. The wizard steps you through naming the role; assigning tasks and categories to the role; and assigning role members and scopes to the role. Edit a Role To edit an existing role in the collection: 1 In the Role tab, select the role, then click Edit. Delete a Role To delete a role in the collection: 1 In the Role tab select the role, then click Delete. A message appears: This operation will delete all of the selected roles. Set a Member Association To add a member to an existing role: 1 In the Role tab select the role, then select Actions > Member Associations. Name: Specify, or use the Object Selector to find, the desired object to be a role member. Scope: Specify, or use the Object Selector to find, the container that defines the scope within which this member can perform the role. 3 In the members list, specify how you want rights related to this role assigned to the member, then click OK. Assign Rights: Instructs eDirectory to automatically grant the member rights necessary to perform the assigned role. When not selected, the member is assigned the role but might not have rights to perform all tasks associated with the role. Inheritable: Select subtree to indicate that the member's scope includes all sub-containers in the specified context. Select base object to indicate that the member can perform the role only in the specified container. Configuring and Customizing iManager 59 novdocx (en) 22 June 2009 NOTE: If a user is a collection owner, and has a member association set, then he/she can manage all the RBS objects within the defined scope. For a list of RBS objects in eDirectory and their description, see Section 6. 1. 1, "RBS Objects in eDirectory, " on page 54. Assign a Category To add a category assignment to an existing role: 1 In the Role tab, select the role, then select Actions > Category Assignment. 2 Select a category, then click the right-arrow to assign it to the role. Add a Description to a Role To add a description to an existing role: 1 In the Role tab, select the role and click Actions > Description. 2 Specify the description in the text box, then click OK. 6. 2. 2 The Task Tab A task is a plug-in that performs a distinct management function, such as creating a user or setting a password. iManager lists the tasks by group in the navigation area on the left side of the window. The RBS Collection Task tab lets you do the following operations: "Creating a New Task" on page 60 "Deleting a Task" on page 60 "Editing the Role Assignment of a Task" on page 61 "Adding a Description to a Task" on page 61 Creating a New Task To create a new task: 1 In the Task tab, select New > iManager Task. The wizard steps you through providing the necessary detail about the new task you are creating. For information on creating tasks in the Plug-in Studio, see "Creating a New Task from Plug-In Studio" on page 65. [. . . ] Standard iManager configurations pass through eDirectory messages related to invalid usernames and passwords during iManager authentication. These messages can inadvertently provide too much information to potential crackers. To avoid this, iManager 2. 7 includes a configuration option to hide the specific reason for login failure. When enabled, the following error messages are replaced with a generic error message that reads: Login Failure. [. . . ]