...
- If necessary, add an attribute to the user class LDAP schema (e.g. DPOD_role attribute).
- For each user that should use DPOD's Console, add the attribute with one of the built-in role names: todo:hk are the roles same? also scenariob
- DPODAdmin
- DPODPowerUser
- DPODOperator DPODInvestigator.
- OpDashAdminRole
- OpDashPowerUserRole
- OpDashOperatorRole
- OpDashInvestigatorRole
Scenario B - an attribute at the group directory entry
...
- If necessary, add an attribute to the group class LDAP schema (e.g. DPOD_role attribute).
- Create 4 groups - one for each built-in role. The group names do not have to be identical to the built-in role names.
- For each group, if required, add the attribute with one of the following values:
- DPODAdminOpDashAdminRole
- DPODPowerUserOpDashPowerUserRole
- DPODOperatorOpDashOperatorRole
- DPODInvestigatorOpDashInvestigatorRole
Note |
---|
If the groups CN is the same as the built-in role names, no additional attribute is required. |