Managing Roles

The following are the roles that are available by default in ES:

The Add, Modify and Remove role options are only visible to administrators with privileges.

To add a user role:

Log in to the Enterprise Store management console using the following URL: https://localhost:9443/admin/carbon/admin/
On the Configure menu, click Users and Roles.
Click Roles. The Roles page appears.
Click Add New Role.
Select the domain. By default, PRIMARY will appear to indicate the primary user store; however, if secondary user stores have been added they will be listed in the Domain drop-down list.
Enter the name for the role.
Click Next and proceed to the next step. You can also click Finish, in which case, the new roles will be created with default permissions (none) and no assigned users.
Select permissions for the new role.
Click Next.
Enter a username pattern. Use one of the following approaches:
- Enter the exact username.
- Enter part of the username followed by or preceded by an asterisk (*) (for example, ad* - this option will return all the users that have usernames starting with "ad").
- Enter only an asterisk (*). This option will return all the users under the selected domain.
Select the users that will be assigned to the role.
Click Finish.
The new role is added to the list on the Roles page.

When adding roles to external user stores

Some external user stores do not allow you to create empty roles. In that case, selecting users who belong to a role is mandatory.
If you connect to an external user store (e.g., LDAP) in the read only mode, you can read existing roles from it, but you can not edit/delete the roles. In this case, you can still create new roles that are editable and can be managed internally.
If you connect to an external user store in read/write mode, you can edit the roles in the external user store as well.

To create an internal role:

Log in to the Enterprise Store management console using the following URL: https://localhost:9443/admin/carbon/admin/
On the Configure menu, click Users and Roles.
Click Roles. The Roles page appears.
Click Add New Internal Role.
Enter a name for the role.
Click Next to proceed to the next step. You can also click Finish, in which case, the new roles will be created with default permissions (none) and no assigned users.
Select the respective permissions that need to be assigned to the role and click Next.
Enter a username pattern and click Search.
- Enter the exact username.
- Enter part of the username followed by or preceded by an asterisk (*) (for example, ad* - this option will return all the users that have usernames starting with "ad".)
- Enter only an asterisk *. This option will return all the users that have not been assigned to this role.
Select the respective users that need to be assigned to this role.
You can also click Finish. In this case, the new roles will be created with no assigned users.
Click Finish.

To search for roles:

Log in to the Enterprise Store management console using the following URL: https://localhost:9443/admin/carbon/admin/
On the Configure menu, click Users and Roles.
Click Roles. The Roles page appears.
Select the user store domain.
Enter a role name pattern. Use one of the following approaches:
- Enter the exact role name.
- Enter part of the role name followed by or preceded by an asterisk (*) (for example, t* - this option will return all the roles that have role names starting with "t".)
- Enter only an asterisk *. This option will return all the roles under the selected domain.
Click Search.

To edit a user role:

Log in to the Enterprise Store management console using the following URL: https://localhost:9443/admin/carbon/admin/
On the Configure menu, click Users and Roles.
Click Roles. The Roles page appears.
Search for the role.
To Rename the role:
- Click Rename.
- Enter the new name of the role.
- Click Finish.
To edit the permissions of the role:
- Click the respective Permissions link.
- Select/De-select on the permissions that you wish to add/remove.
- Click Update.
- A confirmation message appears. Click OK.
To assign users to the role:
- Click the respective Assign Users link.
- Select on the users that you wish to assign to this role.
- Click Update.
- A confirmation message appears. Click OK.
- Click Finish.

To delete a user role:

Log in to the Enterprise Store management console using the following URL: https://localhost:9443/admin/carbon/admin/
On the Configure menu, click Users and Roles.
Click Roles. The Roles page appears.
Search for the role.
Click the corresponding Delete link.
Click Yes to accept the confirmation request.