Assigning a role to a group

Assign an IBM Spectrum Control role to one or more user groups. The role that is assigned to a group determines the product functions that are available to the users in that group.

About this task

If you are using LDAP authentication and you are using Microsoft Active Directory as your LDAP repository, do not assign the Active Directory Primary group for a user to an IBM Spectrum Control role. IBM Spectrum Control cannot identify user membership in a Primary group. Assign an IBM Spectrum Control role to a group that is not the Primary group for the user.

To assign a role to a group, complete the following steps:

Procedure

  1. In the menu bar in the web-based GUI, go to Settings > User Management.
  2. Click Add Group to search for groups that are defined in the authentication repository.
    You can type the name of a group if you know its name, or specify a filter to search for existing groups in the authentication repository. For filters, use an asterisk (*) to represent unknown characters. You must enter at least one character in addition to an *.
    For example, type tpc* to search for groups that begin with the letters "tpc" or "TPC". Type *t to search for groups that begin with or contain the letter "t" or "T".
  3. In the list of groups, select one or more groups to which you want to assign a role.
  4. In the Role field, select the role to assign to the group.
  5. Click OK to assign the role.
    The role that you select is applied to all the groups that you are adding. You can change the role assignments at any time after the group is added.