1.0.1

Table Of Contents
VMware, Inc. 53
Chapter 4 Authenticating and Managing Users, Roles, and Permissions
4 Selectthehierarchyandreportingpermissionsthatyouwanttoassigntotherole.
EnsurethatyouaddtheViewChargebackHierarchypermissiontoeachnewlycreatedrole.Withoutthis
permission,ausercannotviewanyhierarchyand,therefore,cannotperformanytask.
5ClickCreate.
Thenewlycreatedroleisaddedtothetabledisplayingtherolesdefinedintheapplication.
Modify a Role
Youcanmodifyanexistingrole,otherthanthepredefinedroles.YoumusthavetheSuperUserroletoperform
thistask.
To modify a role
1IntheUsers&Rolestab,clickRoles.
Atablelistingalltherolesdefinedintheapplicationisdisplayed.
2 Selecttherolethatyouwanttomodify,and
clickEdit.
TheEditRolescreenisdisplayed.
3Modifytherequiredinformation.
Youcanmodifythenameanddescriptionoftheroleandalsothesetofpermissionsassignedtotherole.
4ClickEdit.
Delete a Role
Youcandeleteanyofthecustomrolescreatedintheapplication.YoumusthavetheSuperUserroleto
performthistask.
To delete a role
1IntheUsers&Rolestab,clickRoles.
Atablelistingalltherolesdefinedintheapplicationisdisplayed.
2 Selecttherolethatyouwanttodelete,
andclickDelete.
Adialogboxconfirmingtheactionisdisplayed.
3ClickOK.
Authentication
Afterauseriscreated,youcanlogintotheapplicationusingthecredentialsofthisuser. Youcanloginas
eitheraLocaluseroraLDAPuser.IfyouarelogginginasaLDAPuser,youmustprovidethelogin
credentialsdefinedintheWindowsActive
Directory.TheLDAPuserloginnameshouldbetheFQDN(for
example,username@example.com).AlthoughyoucancreateauserofthetypeLDAPgroup,youcannotlog
intotheapplicationasanLDAPgroup.
IfanLDAPgroupisaddedtotheapplication,youcanloginasan
LDAPuserbelongingtothatgroup.This
userwillhavethesamerolesandprivilegesassetontheLDAPgroup.IfthisLDAPuserisnotalreadyadded
totheapplication,thesamewouldbedonewhentheuserlogsin.
N
OTETheapplicationallowsyoutoassignonlythosepermissionsthataredefinedattheentitylevelof
ahierarchy.Youcannotassignanyoftheglobal,cost,orRBACpermissions.
NOTEYoucannotmodifyanyofthepredefinedroles.
NOTEYoucannotdeleteanyofthepredefinedroles.