The Roles View

This view lists the user roles that can access the selected group. This view is similar to the Roles page, but applies only to the selected group rather than the entire system. From this view, you can manage which roles have access to the selected group.

The Roles View Toolbar

This toolbar contains buttons that let you add (or remove) roles that can access the selected group. You can also use it to create new user roles.

The following table describes the functionality of each Roles view toolbar button.

Button

Function

Add

Adds a role to the group. For additional information, refer to Adding a Role to a Group.

Remove

Removes a role from the group. For additional information, refer to Removing a Role from a Group.

Create...

Creates a new user role. For additional information, refer to Creating User Roles (Roles View).

Export

Exports the page data to a comma-separated value (.csv) file. For additional information, refer to Exporting Data.

Important: The Enhanced Security Configuration feature for Internet Explorer suppresses export functionality and must be disabled to export data successfully. Pop- up blockers in Internet Explorer or other supported browsers may also suppress export functionality and should be disabled.

Options

(menu)

Opens the Options menu. For additional information, refer to The Options Menu.

The Roles View List

This list displays the roles that can access the selected group. Use the Action column to remove user roles. Additionally, you can filter this table using the filter row.

The following table describes each Roles view list column.

Column

Description

Action

Contains a Remove icon. Use this icon to remove a role from the associated group.

Status

Contains an icon that indicates the type of role. For additional information, refer to one of the following topics:

  • Predefined System Roles
  • Custom Roles

Name

Indicates the name of the user role.

Source Group

Indicates the group from which the role was created.

Adding a Role to a Group

Add a user role to a group to grant it group access. If the selected group's Policy inheritance setting is set to true, the added user role will also be able to access the selected group's descendant groups.

Add roles to a group from the Roles view.

  1. From the Navigation Menu, select Manage > Groups.
  2. From the View list, select Roles.
  3. Select a group from the directory tree.
  4. Click Add.
  5. Select a role from the Select a Role list. Select from the following roles:
    • Administrator
    • Manager
    • Operator
    • Guest
    • Custom Role(s); only available if a custom role has been created.
  6. Click the Save icon.
    The role is saved and associated with the group.

Removing a Role from a Group

Remove a user role from a group to deny its associated users group access. If the selected group has policy inheritance set to true, removing a role will remove the role from the selected group's descendant groups as well.

Remove user roles from a group using the Roles view.

  1. From the Navigation Menu, select Manage > Groups.
  2. From the View list, select Roles.
  3. Select a group from the directory tree.
  4. Remove roles from the group.
    Use one of the following methods.
  5. Method

    Steps

    To remove a single role:

    Click the Remove icon associated with the role you want to remove from the group.

    To remove multiple roles:

    1. Select the check boxes associated with the roles you want to remove from the group.
    2. From the toolbar, click Remove.

    Inherited roles cannot be removed. To remove inherited roles, either edit the group’s inheritance policy or remove the roles from the applicable parent group. To understand group policy inheritance and its effects, refer to Defining Agent Policy Inheritance Rules.

    A dialog displays, asking you to acknowledge the removal.

  6. Acknowledge the removal by clicking OK.
    The role is removed and is no longer associated with the group.

Creating User Roles (Roles View)

Custom roles let you select individual access rights, accessible groups, and accessible endpoints for that role. Create a custom role when predefined system roles do not contain the access rights needed for a particular user. Creating a custom role is also useful when you require a role that can only access specific groups or endpoints.

You can create roles from the Roles view as well as the Roles tab.

  1. From the Navigation Menu, select Manage > Groups.
  2. From the View list, select Roles.
  3. Select a group from the directory tree.

    You may select a group that is either in the Custom Groups or Systems Groups hierarchy.

  4. Click Create.
    The Create Role dialog appears with the Information tab selected by default.
  5. Type a name in the Name field.
  6. Type a description in the Description field.
  7. Select a role template from the Role Template list.
    Any existing role can be used as a template. The selected role determines initial access rights. You can later change which access rights are assigned to the role.
  8. Select the Access Rights tab.
  9. Select or clear the desired access rights.
    For additional information, refer to Predefined System Roles.

    Select or clear the All check box to globally select or clear all access rights. Additionally, child access rights are unavailable until their parent access rights are selected.

  10. Select the Groups tab.
  11. Assign the desired accessible endpoint groups to the role.
    Use one of the following methods to assign groups.
  12. Method

    Steps

    To assign individual groups:

    1. From the Available Groups table, select the check box(es) associated with the group(s) you want to assign.
    2. Click Assign.

    To assign all groups:

    Click Assign All.

    Remove groups using Remove and Remove All.

  13. Select the Endpoints tab.
  14. Assign the desired accessible endpoints to the role.
    Use one of the following methods to assign endpoints.
  15. Method

    Steps

    To assign individual endpoints:

    1. From the Available Endpoints table, select the check box(es) associated with the endpoint(s) you want to assign.
    2. Click Assign.

    To assign all endpoints:

    Click Assign All.

    Remove endpoints using Remove and Remove All.

  16. Click OK.
    The new role is saved and assigned to the selected group.

    A created role can be edited from the Users and Roles page Roles tab. Refer to Editing User Roles.
    In addition, a new role can be assigned to users. Refer to Editing Users.

Exporting Roles View Data

To export information displayed in the Roles view list to a comma separated value (.csv) file, click the toolbar Export button. Exporting data lets you work with that data in other programs for reporting and analytical purposes.

For additional information, refer to Exporting Data.