As described in Configuring LDAP, DPOD's installation may follow one of two scenarios.
Step 1- choose your preferred scenario:
Scenario A - an attribute at the user directory entry
When your installation scenario matches Scenario A in the Concepts Section, perform the following steps:
- If necessary, add an attribute to the user class LDAP schema (e.g. DPOD_role attribute).
- For each user that should use DPOD's Console, add the attribute with one of the built-in role names:
- OpDashAdminRole
- OpDashPowerUserRole
- OpDashOperatorRole
- OpDashInvestigatorRole
Scenario B - an attribute at the group directory entry
When your installation scenario matches Scenario B in the Concepts Section, perform the following steps:
- If necessary, add an attribute to the group class LDAP schema (e.g. DPOD_role attribute).
- Create 4 groups - one for each built-in role. The group names do not have to be identical to the built-in role names.
- For each group, if required, add the attribute with one of the following values:
- OpDashAdminRole
- OpDashPowerUserRole
- OpDashOperatorRole
- OpDashInvestigatorRole
If the groups CN is the same as the built-in role names, no additional attribute is required.
Step 2 - Configure Authentication
Step 3 - Configure Applicative Authorizations
- Follow Configure LDAP Authorization