New Role Definition Dialog Box

Name

Provides a space for you to type the name of the new role definition (for example, Account Manager).

A role definition is a collection of permissions in tasks and operations. You are prevented from entering a name that already exists in this scope. It cannot contain any of the characters \ / : * ? " < > | and [Tab]. The name of a role definition has a maximum size limit of 64 bytes.

Description

Provides a space for you to type the description of the new role definition.

The description does not affect the functionality of Authorization Manager and should be meaningful to you. The description has a maximum size limit of 1,024 bytes.

Add

Adds a task to the role definition (for example, "Change Password").

A task is a collection of operations required to do specific types of work that are meaningful to the administrator.

Remove

Removes the selected task or role from the definition. To make this button available, click an item in the list.

The tasks and lower-level roles that define this role

Lists the tasks and specific roles that define this role. For example, a task called "Reset Password" might be part of a role called "Account Manager."

Authorization Rule

Click to create an authorization rule for the role definition. An authorization rule is written in VBscript or JScript, and makes an authorization decision based on application group membership and the application-specific data that is relevant and current when the script is run.