Adding Roles

You can add new roles to TEA_DB, LDAP realm and to the agents. You can also add permissions to an existing role available in the agent. TEA_ADMIN is the default role.

1. From the Home page, select the Users card.
   The User Management pane is displayed.
2. Select Roles.
3. From the Roles pane, click Add.
4. On the New Role window, specify the name of the role, description if any, and the product to which you want to apply the role. Click Next to continue defining the role.
   Note: You could exit the wizard by clicking Finish at any stage of the wizard.

   The second step of the wizard is to help you add permissions to the role.This pane lists all the entity types in one tab and the instances, if any, in another tab. By default, the Entity Type tab is in focus. If you want to assign entity-based permissions, refer to Setting Entity-Based Permissions on a Role. If you want to assign instance-based permissions, refer to Setting Instance-Based Permissions on a Role.
5. Select the users you want to apply the role to, and click Next.
6. Select the groups you want to assign the role to.
7. Click Finish.
   Note: If you upgrade an agent, you can only have additional roles on the same agent. You cannot delete or change the existing role definition.

• Setting Entity-Based Permissions on a Role
  This is the classic way of assigning permission. Each row represents an entity type and each column represents the type of permission. You can also see the count of permissions selected on the header of the tab.
• Setting Instance-Based Permissions on a Role
  By using instance-based permissions, users can now enforce permissions on a particular instance of an entity type.