Setting Up Role Based Access Control; Configuring Role Based Access Control For Windows Server 2003 - Toshiba e-Studio 3500c Network Administration Manual

1 Setting up Network Server

Setting up Role Based Access Control

When you enable the Role Based Access Control for the User Management Setting, you must
configure the Role Based Access Control in the LDAP server.
When you enable the Role Based Access Control, you can restrict the operations for each regis-
tered user using LDAP server.
To manage the Role Based Access Control, add the following schema setting in each user infor-
mation registered in the LDAP server.
OID
Attribute Name
Attribute Type
Max
Value
Example:
eBMUserRole = "+C+Em+Fl+Fx+iF"
Copy, Email, Save as file, Fax, and Internet Fax are allowed for the user.
eBMUserRole = "-Em-Fx"
Others than Email and Fax are allowed for the user.
eBMUserRole = " "
All functions except the administrative functions are allowed for the user.
eBMUserRole = "*"
All functions except the administrative functions are allowed for the user.
(Same as eBMUserRole = " ")
"+" and "-" cannot be entered in the same user.
"*" must be entered into a head.

Configuring Role Based Access Control for Windows Server 2003

This section describes how to set up the Role Access Based Control for a Windows Server 2003
as an example. Please set up the server in your accoutability.
To configure the schema for Role Based Access Control, you must create a schema first.
38

Setting up Role Based Access Control

1.3.6.1.4.1.1129.2.100.1.1
eBMUserRole
Unicode string
256
C: Copy
Em: Email
Fl: Save as file
P: Print
B: Store to e-Filing
Fx: Fax
iF: Internet Fax
FC: Address Book registration
Template registration
User settings (can be set from the [USER] button in
the [USER FUNCTION] button
*: All above functions
Also you can use the following prefixes:
+: Prefix for permitting
-: Prefix for prohibiting