Controlling Guest Pass Generation Privileges; Creating A Guest Pass Generation User Role - Ruckus Wireless ZoneDirector 1100 User Manual

Managing Guest Access
Working with Guest Passes

Controlling Guest Pass Generation Privileges

To disable the guest pass generation privilege granted to all basic "default" role users, follow
these steps:
1. Go to Configure > Roles. When the Roles and Policies page appears, a table lists all existing
roles, including "Default."
2. Click Edit (in the "Default" role row).
3. In the Policies options, clear the Allow Guest Pass Generation check box.
4. Click OK to save your settings. Users with "default" roles no longer have guest pass
generation privileges.

Creating a Guest Pass Generation User Role

To create a guest pass generator role that can be assigned to authorized users, follow these
steps:
1. Go to Configure > Roles.
2. In the Roles table, click Create New.
3. When the Create New features appear, make these entries:
• Name: Enter a name for this role (e.g., "Guest Pass Generator").
• Description: Enter a short description of this role's application.
• Group Attributes: This field is only available if you choose Active Directory as your
authentication server. Enter the Active Directory User Group names here. Active Direc-
tory users with the same group attributes are automatically mapped to this user role.
• Allow All WLANs: You have two options: (1) allow all users with this role to connect to
all WLANs, or (2) limit this role's users to specific WLANs, and then pick the WLANs they
can connect to.
NOTE: When creating a guest pass generator Role, you must ensure that this Role is given
access to the Guest WLAN. If you create a Role and allow guest pass generation, but do not
allow the Role access the relevant WLAN, members of the "Guest Pass Generator" Role will
still be unable to generate guest passes for the Guest WLAN.
• Guest Pass: If you want users with this role to have permission to generate guest passes,
check this option.
4. Click OK to save your settings. This new role is ready for application to authorized users.
220