The Active Roles console provides the New Object - Access Template wizard for creating Access Templates. You can start the wizard as follows: right-click Access Templates in the console tree, and select New | Access Template. In this case, the wizard adds an Access Template to the Access Templates container.
NOTE: It is advisable to store custom Access Templates in a separate container. You can create a container as follows: right-click Access Templates in the console tree, and select New | Access Template Container. After you have created a container, you can have the wizard add an Access Template to that container rather than directly to Access Templates: right-click the container in the console tree and select New | Access Template.
Figure 12: Add new Access template
Click Next. The second page of the wizard looks as shown in the following figure.
This page prompts you to configure a list of Access Template permission entries. You can use the Add, Remove and View/Edit buttons to add, remove and modify an entry, respectively. Clicking Add starts the Add Permission Entries wizard that helps you configure permission entries. The wizard is discussed later in this section.
Figure 14: Add Permission Entries
After you have selected the object classes you want, click Next. The next page of the wizard looks as shown in the following figure.
Figure 15: Permission category
You can select one of the following permission categories:
If you want the permission to deny certain administrative actions, you select the Deny permission check box.
The following sections elaborate on the permission categories you can select in the Add Permission Entries wizard.
After you select Full Control access and click Finish, the permission is added into the newly created Access Template.
Permissions in this category provide for administrative operations on objects themselves (but not their properties) of the classes that you selected in the previous step of the Add Permission Entries wizard.
Administrative operations are selected from the list, which is displayed when you select Object access. You select the necessary operations by selecting the appropriate check boxes. For example, you might select List Object to allow viewing objects of certain types.
After you have selected the operations, click Finish to complete the Add Permission Entries wizard. The permission is added into the newly created Access Template.
© 2020 One Identity LLC. ALL RIGHTS RESERVED. Feedback 이용 약관 개인정보 보호정책