Grass Valley iControl V.6.02 - Manual (Page 268)

Access Control
Templates
258
Templates
Each time you add a new resource (card or service), it will obtain a set of default permissions
from a template stored in the LDAP directory. The template is created automatically the first
time you add a new card or service, and can be modified in the Resource Assignment panel
of the Privilege Management window (see
"Assigning Resources" , on page 282).
Templates are particularly useful for cards, allowing you to define the basic permissions for all
roles for a certain card type. As new cards (of the same type) are added, they copy the
permission set.
Users
iControl distinguishes between the user profiles used to log on to client-side applications (like
iC Navigator, iC Creator, etc.) and user profiles used to log on to the Application Server itself
(through a secure shell or the server’s Web page).
User Profile Management for Client-Side Applications
For client-side operations, iControl offers access control based on individual user credentials
and the role assigned to that user.
A user is an individual registered in iControl, usually attached to a single domain. A user is
designated by a UID, followed by the @ symbol, followed by a domain
(e.g.
[email protected] ).
A user can access resources in his/her own domain or any domain below on the condition that
permission is given to that user at the domain level. To access a domain, the user has to be
authenticated by providing a password.
User Profile Management for Application Server Administration
For Application Server administration, if you log on to the iControl—admin page using the
admin profile
1
, you can create and delete user profiles for server-side operations on the
iControl—Admin users management page. Additionally, you can import file-based lists of user
profiles or else export iControl’s current user profiles to a spreadsheet.
Resource Unique ID Type Domain
Densité card dev4.icontrol.com_H_Densité_SLOT_1_31 DEC-1002 myCompany.com
Web page http://10.2.0.251/icw/sites/SkyAssure2.0.0.0_
0007/Web_pages/home.mpf webpage myCompany.com
See also
For more information about creating, editing, and deleting user profiles for client-side
applications, see
"Creating, Modifying, and Removing Users (Client-Side Applications)" ,
on page 275.
1. The admin user profile is the only profile with administrator privileges for server-side operations.