32.3. Managing roles in the IdM Web UI

Procedure

1. To add a new role, open the IPA Server>Role-Based Access Control submenu and select Roles:
2. The list of roles opens. Click the Add button at the top of the list of roles.
3. The Add Role form opens. Enter the role name and a description:
4. Click the Add and Edit button to save the new role and continue to the role configuration page to add privileges and users.
5. Add members using the Users, Users Groups, Hosts, Host Groups or Services tabs, by clicking the Add button on top of the relevant list(s).
6. In the window that opens, select the members on the left and use the > button to move them to the Prospective column.
7. Select the Privileges tab and click Add.
8. Select the privileges on the left and use the > button to move them to the Prospective column.
9. Click the Add button to save.
10. Optional: If you need to remove privileges or members from a role, select the checkbox next to the name of the entity you want to remove and click the Delete button. A dialog opens. Click Delete.
11. Optional: If you need to remove an existing role, select the checkbox next to its name in the list and click the Delete button to display the Remove roles dialog. Click Delete.