Red Hat CERTIFICATE SYSTEM 8 - AGENTS GUIDE Agents Manual page 139

NOTE
A user can only see entries relating to the profile configured for it, including both token
operations and tokens themselves. For an administrator to be able to search and
manage all tokens configured in the TPS, the administrator user entry should be set to
All profiles. Setting specific profiles for users is a simple way to control access for
operators and agents to specific users or token types.
Token profiles are sets of policies and configurations that are applied to a token. Token profiles are
mapped to tokens automatically based on some kind of attribute in the token itself, such as a CCUID
range. Token profiles are created as other certificate profiles (as in
Profiles"). Configuring token mapping is covered in the Certificate System Administrator's Guide.
1. Search for the users, and click the link of the user's name in the results page.
2. Scroll to the bottom of the page, and select the profile from the drop-down menu.
Only fifteen (15) profiles are listed in the menu; if there are more than fifteen profiles available,
then the last profile is Other, which allows the administrator to type in the selected profile
manually.
NOTE
If the All Profiles option is added to the user, then any other configured profiles
are dropped, because they are already included in the All Profiles option.
3. Click the Add Profile button to add the profile to the user entry.
The new profile is listed as part of the user entry attributes. Up to fifteen profiles are listed on the
profile; if there are more than fifteen, then the profile list is paginated.
9.4.2.4. Changing Roles for Users
A role is just a group within the TPS. Each role can view different tabs of the TPS services pages. The
role is editable, so it is possible to add and remove role assignments for a user.
A user can belong to more than one role. The default admin user, for example, belongs to all three
roles.
1. Search for the users, and click the link of the user's name in the results page.
Managing TPS Users
Section 2.1, "About Certificate
129