Figure 21: Assigning Roles Defined In Domain "Global; Figure 22: Assigning Roles Defined In Domain "Global" To Subdomain Only; Configuring Roles - Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1 Administration Manual

Network and Security Manager Administration Guide
74

Figure 21: Assigning Roles Defined in Domain "global"

The user role "r1" is defined in global domain, but the user has access to only a subdomain
d1 and therefore gets a the global role "r1."

Figure 22: Assigning Roles Defined in Domain "global" to Subdomain Only

The user is defined in domain "global" but has access to subdomains only. The user is a
"Domain Administrator" in subdomain "d1," but has a custom role r1 for subdomain "d2."

Configuring Roles

To assign a role to the new administrator, select the Permissions tab and choose a role
for the new administrator. When you assign a role to an NSM administrator, the
administrator can perform the predefined system activities specified in that role.
You can select a default or custom role for that administrator. NSM includes default roles
for common job responsibilities:
Domain Administrator—Can perform all activities in the domain.
Read-Only Domain Administrator—Can perform all read-only activities in the domain.
IDP Administrator—Can perform all IDP activities. All other activities are excluded.
Read-Only IDP Administrator—Can perform all read-only IDP activities.
Copyright © 2010, Juniper Networks, Inc.