Creating a new role

You can create new roles, adding other roles, tasks, and operations, as required. You can create roles from a combination of existing roles and tasks.

Note:

It is not advisable to add individual operations to a role. We recommend that you use tasks to create custom roles. The tasks contain the correct combination of internal and external operations. Adding unnecessary internal operations to a role reduces the security of that role.

To create a new role

  1. Using Vault Service account, start the Administration Console.

  2. Right-click the Directory container and, on the shortcut menu, click Authorization Manager.

  3. In the Authorization Manager window, under Enterprise Vault, expand Definitions.

  4. Right-click Role Definitions and, on the shortcut menu, click New Role Definition.

  5. In the Role Definition window, enter a Name and Description for the new role.

  6. Click Add to add roles, tasks, or operations to the role.

    The changes take approximately one minute to be replicated to all Enterprise Vault servers. The Administration Console shows the changes the next time it is started.

    The Administration Console does not show the changes until it has been restarted. However, the changes have been replicated to Enterprise Vault servers. This may result in that person receiving unexpected error messages.