Managing Tagging Engine Security

This topic describes how to use the Security page to add, edit, and delete roles and manage the users that belong to these roles.

For information on the roles that are delivered with the Tagging Engine, see About Delivered Roles.

Click Save to keep any changes that you have made. If you have made changes but have not yet clicked Save, you can click Cancel to restore the previously-saved settings.

Security Assignments

Use the Security Assignments area to create, edit, and delete roles.

You can perform these actions:

To view and edit the properties of a role, click the role's name or description. The role's name, users and group assignments, and permission assignments appear below. Edit the role's security assignments as desired.
To create a role, click Add, then complete the Role Name & Description, User & Group Assignments, and Permission Assignments areas.
To delete a role, select the check box for the role that you want to delete, then click Delete.

Role Name & Description

Use the Role Name & Description area to create or edit the names or descriptions of roles. You can perform these actions:

To create or edit the name of a role, type its name in the Role Name box.
To create or edit the description of a role, type its description in the Description box.

User & Group Assignments

Use the Users & Group Assignments area to edit the portal users and portal groups that belong to Tagging Engine roles. You can perform these actions:

To add a portal user or portal group to a Tagging Engine role, click Add, then use the Select Users and Groups dialog box to browse, search for, and choose the users and groups that you want to add to the role.
To remove a portal user or portal group from a role, select the check box for the user or group that you want to remove, then click Remove.

If a user is a member of more than one role, the Tagging Engine checks all roles when deciding whether or not a user can see a given object, or perform a given task on that object. If a user belongs to multiple roles, they are granted the combination of capabilities that are included in those roles.

If a user is a member of a group that is added to a role, the Tagging Engine grants the user the capabilities that are associated with that role. If a user is a member of a group that is included in more than one role, the Tagging Engine checks all roles when deciding whether or not that user can see a given object, or perform a given task on that object.

Permission Assignments

Use the Permission Assignments area to edit the role's capabilities. You can perform these actions:

To add a capability to a role, click Add, then use the Select Capabilities dialog box to browse, search for, and choose the capabilities that you want to add.
To remove a capability from a role, select the check box for the capability that you want to remove, then click Remove.