[Freeipa-users] User Roles and access in GUI

[Martin Kosek]

On 04/12/2013 01:07 AM, Chandan Kumar wrote:
> Hello,
> 
> I have a question regarding Uer Roles and Access in GUI. What I have found that
> irrespective of Role assigned to a user, he gets read only access across the
> directory. 
> 
> For example, I created one user say "dnsadmin" with only Roles related to DNS
> such as DNS Servers, DNS Administrator. Now that user has read only access to
> entire directory. Is there any way of controlling it? 
> 
> 
> Thanks,
> Chandan
> 

Hello Chandan,

If you create a new role, assign "DNS Administrators" privilege to it, and
assign that role to user dnsadmin, that user will have write access to DNS tree
and configuration.

Beyond that tree, dnsadmin will have read-only access just like all other
non-admin users. If you want dnsadmin to have write access also to other
entries, you would need to assign more privileges/roles to it.

HTH,
Martin