Assigning roles for administration
|Article:HOWTO56621|||||Created: 2011-08-01|||||Updated: 2013-07-12|||||Article URL http://www.symantec.com/docs/HOWTO56621|
The Vault Service account can perform all Enterprise Vault management operations and is not restricted in any way. Initially, the Vault Service account is the only account that can create roles and assign them to lower-level administrators.
If you have configured Enterprise Vault Reporting, you must enable the synchronization of Enterprise Vault Reporting roles-based security.
See "Enabling the synchronization of Enterprise Vault Reporting roles-based security" in the Reporting guide.
To assign a role to a user or group
In the Administration Console, right-click the Directory container and click Authorization Manager.
In the Authorization Manager window, under Enterprise Vault, click Role Assignments.
If the role that you want to use is not listed, right-click Role Assignments and, on the shortcut menu, click Assign Roles. The Add Role listing shows the roles you can select. Select the required role and click OK.
Right-click the role to which you want to assign users and then, on the shortcut menu, click Assign Application Groups or Assign Windows Users and Groups.
If you chose Assign Application Groups, check the users or groups you want to add to the role, and then click OK.
If you chose Assign Windows Users and Groups, the standard Windows Select Users, Computers or Groups dialog appears. Select the required users or groups and then click OK to close the dialog box.
In the Authorization Manager File menu, click Exit. Click Yes to confirm that you want to save your changes to the Directory database.
The changes take approximately one minute to be replicated to all Enterprise Vault servers, and to any SQL Server Reporting Services servers on which Enterprise Vault Reporting is configured. Wait a minute if you want to start Authorization Manager again to make further changes.
Administration Consoles do not reflect the assignment changes until they are restarted. After you perform role assignments, administrators may receive role-related error messages until they restart the Administration Console.
Article URL http://www.symantec.com/docs/HOWTO56621