Page Comparison

...

WSO2 supports the role-based authentication model where privileges of a user are based on a the role it is attached withto. By default, WSO2 products come with the following roles:

...

The role is created and is listed on the Roles page. You can now edit the role as needed.

Info

When adding roles to external user stores, note the following:

Some external user stores do not allow you to create empty roles. In that case, selecting users who belong to a role is mandatory.
If you connect to an external user store (e.g., LDAP) in read-only mode, you can read existing roles from it, but you can not edit/delete the roles. In this case, you can still create new roles that are editable and can be managed internally.
If you connect to an external user store in read/write mode, you can edit the roles in the external user store as well.

Searching for user roles

You can search for an existing user role using the search facility on the Roles screen as follows:

S elect the domain (unique identifier) of the user store where you want to search for the role. By default, there are three options:
- PRIMARY: Searches within the primary user store.
- ALL-USER-STORE-DOMAINS: Searches within all user stores configured in the system.
- Internal: Searches in the database where internal/system-reserved user roles such as Internal/everyone are stored.
Enter the role name pattern. For example, if you enter "ab*", it returns all roles that have names starting with "ab".
Click Search to see the results.

Editing or deleting a role

If you need to make modifications to a role, select the domain (user store) where the role resides, and then use the links in the Actions column on the Roles screen as follows:

...

If you need to make modifications to the role names, you need to do one of the following:

Table of Contents

maxLevel	5
minLevel	5

...

Versions Compared

Old Version 30

New Version Current

Key

Editing or deleting a role