Adding a role

When you first start building your ACLs, begin by adding names and remarks for all of the roles that you know about. Do not attempt to identify any roles to which the new roles belong, or any roles that belong to the new roles.

Then, you can return to the roles added and modify the original information to create the role-in-role membership structure. The main reason for this is that you can only specify membership for roles that have previously been added.

It is best to add and organize all roles before adding any users. Then the role or roles for each user can be specified as that user is added.

After the first iteration, include membership information about a role when it is added. This depends upon whether the roles and users that you plan to identify already exist in your ACL structure.

  1. Click the Roles tab.
  2. Click Add New Role to open the Add/Modify Role dialog box.
  3. In the Role Name field, specify a unique name for the new role.
  4. Add any comments about the role in the Remark field.
  5. To make the new role a member of one or more existing roles, click Roles. Then select the appropriate roles from the resulting Select Roles dialog box. Click OK.
  6. To identify one or more existing users or roles as members of the new role, click Users/Roles. Then select from the resulting Select Users/Roles dialog box. Click OK.