Grass Valley iControl V.6.02 - Manual (Page 272)

Access Control
Role Inheritance
262
Role Inheritance
Each domain maintains associations between users and roles, and implements role
inheritance. Role inheritance means that if there is no explicit role for a given user in a domain,
the role this user has in the superior domain (if any) will be used.
For example, if [email protected] has the role operator in myCompany.com, then
[email protected] will have role operator in domain montreal.myCompany.com also.
Access Control Configuration Form
The iControl—Access control page is used to enable or disable access control on an Application
Server, as well as to set up directory (LDAP) services.
Role Description
Administrator Full access to all resources plus administrative privileges. For example, an administrator can create
accounts and assign permissions for roles
Maintenance Access to all resources but no administrative privileges. For example, maintenance personnel can
change hardware configurations and settings but cannot modify user privileges or create accounts
Operator Limited to operational tasks only. For example, an operator may not be able to change hardware
settings
Guest Limited to very specific applications and views. Cannot change anything.
IT Limited to IT tasks, NMS type monitoring of servers including iControl Application Server health
monitoring.