Extreme Networks Ridgeline Guide Manual page 254

Using Identity Management
Figure 199: Hierarchical Role Management Example
Employees
(Company == XYZCORP)
Sales
(Company == XYZCORP AND Department == Sales)
(Company == XYZCORP AND Department == Sales AND Title contains Manager)
To create a role hierarchy, you define one or more roles as child roles of which a parent role is derived.
Ridgeline supports a maximum of 5 levels. A parent role can have up to 8 children but a child cannot have
more than one parent. Multiple inheritances are not allowed. In a hierarchy, only policies are inherited, not
the match criteria from parent roles.
252
Managers
Engineers
(Company == XYZCORP AND Department == Sales AND Title contains Engineer)
Figure 200 is a diagram of the role hierarchy.
Policy 1: Allow common file shares
Policy 2: Allow access to time-sheet application
Policy 3: Allow CRM applications
Policy 4: Deny Engineering resources
Policy 5: Allow access to Finance applications
Policy 6: Allow access to HR tools
Policy 7: Allow access to partner tools
Ridgeline Concepts and Solutions Guide
EX_idm_0002