Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
Next revision Both sides next revision
devel:documentation:roles [2019/03/15 12:48]
tomiskar [Duplicate role]
devel:documentation:roles [2019/03/18 08:45]
kopro [Copying roles from a user] add link
Line 12: Line 12:
 From the perspective of the identity manager, it does not matter whether the user acquires an account in a specific application, is placed in a group in LDAP, his indication is set to “can use VPN”, or a permission is set for him in the application. In all the cases, a role is assigned. A simplification carried out like this allows general rules to be applied for assigning all types of permissions (~roles) in the same way. From the perspective of the identity manager, it does not matter whether the user acquires an account in a specific application, is placed in a group in LDAP, his indication is set to “can use VPN”, or a permission is set for him in the application. In all the cases, a role is assigned. A simplification carried out like this allows general rules to be applied for assigning all types of permissions (~roles) in the same way.
  
 +====== Role-differentiating icons ======
 +
 +...to be completed
 ===== Roles and contracts ===== ===== Roles and contracts =====
  
Line 64: Line 67:
  
  
 +===== Copying roles from a user =====
 +
 +Copying roles from user to user is new feature that allow easy share/copy roles/permission from user to user. For example admin has request from users: give me roles like has my colleague. For this purpose was create this function.
 +
 +This feature available on role request detail as new button see the picture:
 +
 +{{ :devel:documentation:add_role.png |}}
 +
 +
 +For more information about the feature with better describe please visit this [[devel:documentation:roles:dev:copying_role_by_user|admin wiki page]].
 ===== Automatically assigned roles by organization structure ===== ===== Automatically assigned roles by organization structure =====
 The role can be linked to a Tree structure (e.g. position in organizational structure). That role is assigned to and removed from a user based on adding/removing the user (via their contract or other contract position) to/from the organizational tree structure. If a contract is not valid yet, roles are assigned but are disabled until the contract starts. The role can be linked to a Tree structure (e.g. position in organizational structure). That role is assigned to and removed from a user based on adding/removing the user (via their contract or other contract position) to/from the organizational tree structure. If a contract is not valid yet, roles are assigned but are disabled until the contract starts.
  • by doischert