Version 3.1 SP2 Reference Guide - Extreme Networks

Using Identity ManagementA role can:●●●Be independent of a parent or a childHave childrenHave only one parentCreating a New RoleYou can define network-wide roles and specify the match criteria for assigning a device to that role aswell as define the role priority. You can create roles in a hierarchy to place a user under a role.To create a role hierarchy, define one or more roles as child roles of what becomes parent role. Ridgelinesupports a maximum of five children levels. A parent role can have up to eight children, but a childcannot have more than one parent. Multiple inheritances are not allowed. In a hierarchy, only policiesare inherited, and the match criteria from parent roles is not inherited. Ridgeline allows a maximum of64 roles and each role name can have a maximum of 32 characters.Priorities can have values from 1 to 255. One (1) is the highest priority The priority of the roledetermines the role to which a user is mapped. The default priority is 255. A device is assigned thelesser priority role value whenever there is a conflict. If both roles have equal priority or the defaultpriority, the last role created is assigned the higher priority.To add a new role, complete the following steps:1 On the menu bar, click File > New >Role, or right-click on the Roles list to open the menu. Existingroles are shown on Tree View and Table View. See Figure 384. The Create new role dialog box opens.Figure 384: Choose a New Role From the Menu2 Enter the role name, an optional description, and its priority. See Figure 385.542Ridgeline Reference Guide