Assigning a role or role group to a user

To give access rights to a user, assign to that user a role or role group that grants those access rights. How to do this is described in add -user (add role or role group to user).

Notes:

You can assign any number of roles or role groups to a user.
All changes (role or role group assignments or removals) for a particular user in a particular OU must be committed and approved before any changes can be made for that user in a different OU.
FTM SWIFT delivers predefined roles, which are described in Roles.
A user does not exist as a configuration entity in FTM SWIFT, but only as an attribute of a role or role group assignment.
A user ID can be up to 100 characters long.
The user ID of an FTM SWIFT system configuration administrator (recommended user ID SA1 or SA2) or an FTM SWIFT security administrator (recommended user ID UA1 or UA2) can contain only:
- Characters of the set [A-Za-z0-9]
- Special characters #, @, or $
The user ID of any other user can also contain:
- Periods (.)
- Hyphens (-)
- Underscore characters (_)

For example:

To assign the security administrator (DniUA) role to the user JSMITH for SYSOU, enter:
```
INST1.SYSOU.DNI_SECADM>add -user JSMITH -ro DniUA -ou SYSOU
```
To assign the Approver role to the user JSMITH for BANKB, enter:
```
INST1.BANKB.DNI_SECADM>add -user JSMITH -ro Approver -ou BANKB
```
To assign the MER administrator (MERAdmin) role group to the user JSMITH for BANKB, enter:
```
INST1.BANKB.DNI_SECADM>add -user JSMITH -rg MERAdmin -ou BANKB
```