Figure 14: Creating Custom Domain - Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual

Network and Security Manager Administration Guide
70
Custom Roles
Figure 14 on page 70 shows the format for a custom role. The format for the custom role
of NS-NSM-User-Role-Mapping is:
domainName1:domainName2.roleName
domainName1 is the domain that the current user can access.
is the domain that the current role (
domainName2
If you create a custom domain, NS-NSM-User-Domain-Name should include the domain's
full path. Do not omit the word "global" and include the full path for
example, global.d1, global, or global.d2. Figure 14 on page 70 shows an example.

Figure 14: Creating Custom Domain

In Figure 14 on page 70, users belong to domain d1 and role r1 is defined in domain1.
Therefore, the domain name is global.d1 and the role is global.d1:global.d1.r1.
Predefined Roles
The current predefined role names, which users can use, are listed below:
Domain Administrator
IDP Administrator
Read-Only Domain Administrator
Read-Only IDP Administrator
Read-Only System Administrator
System Administrator
Predefined roles do not belong to any domain. The format for predefined roles is:
DomainName1:(predefined-role-name)
is the domain that the current user can access.
DomainName1
) belongs to.
roleName
domainName
Copyright © 2010, Juniper Networks, Inc.
, for