Version 3.1 SP2 Reference Guide - Extreme Networks

Chapter 23Manager roles always provide full access to any features for which access is enabled, and the Monitor roleprovides only Read Only access to any features for which access is enabled.4 Click Apply to create or modify the role.If features are globally disabled through the Features Properties settings under the Server PropertiesConfiguration tab, you will not be able to select those features when you add or modify a role. TheAccess column will show Globally Disabled instead of access options. The STP and VoIP features areglobally disabled by default, and this is shown in Figure 326.Deleting a RoleTo delete a role, follow these steps:1 From within the Ridgeline Administration window, click the Roles tab to show the RoleAdministration page.2 Select the role you want to delete and click Delete.NOTEa user.You cannot delete any of the predefined roles. You also cannot delete a role that is currently assigned toA confirmation window appears.3 Click Yes.This removes the role from the Ridgeline database.RADIUS AdministrationIf your user role is Administrator, you can enable Ridgeline as a RADIUS client, and change its port orthe RADIUS secret. By default RADIUS authentication is disabled.Enabling Ridgeline as a RADIUS client means that when a user attempts to login to the Ridgelineserver, Ridgeline will request authentication from an external RADIUS server. The external RADIUSserver can also be configured to return role information to Ridgeline along with a successfulauthentication. If this feature is enabled, you must create corresponding roles in Ridgeline for every rolethat the RADIUS server may return. If a user is authenticated with a role that Ridgeline does notrecognize, the user will be given the Monitor role by default. See the Ridgeline Concepts and SolutionsGuide for information on configuring this in the RADIUS server.Disabling RADIUS in Ridgeline means that Ridgeline’s RADIUS server will not be available forauthenticating users, and it will not request user authentication from an external RADIUS server.To change the Ridgeline server RADIUS configuration, click the RADIUS tab at the top of the page. TheRADIUS Administration page appears, as shown in Figure 327.Ridgeline Reference Guide467