...
Unlike the predefined roles in which the permissions are restricted to a specific BloxOne service, a custom role gives you the flexibility to include granular permissions across different BloxOne services. Since you only get the permissions you explicitly select, Infoblox strongly recommends that you map out the permissions and follow the best practices to ensure that the selected permissions work properly together to deliver the expected results for the users.
Best Practices for Custom Roles
To ensure that a custom role functions properly, consider the following:
- When creating a custom role for Cloud Services Portal users, you must include the following permissions: Tag Update, Tag Read, Tag Delete, and On-Prem Host View. Otherwise, certain tasks and pages might not function properly.
Creating Custom Roles
To create custom roles with granular permissions, complete the following:
- Go to Administration - > User Access -Access > Roles.
- Click Create Role.
- In the Create Role dialog, complete the following:
- Name: Specify a name for the role.
- Description: Specify a brief description for the role.
- FEATURES: This section displays the available permissions for your BloxOne services. Select the check boxes of all applicable permissions you want to assign to this role. Depending on your license entitlement, the permissions you select in this section might or might not be applicable for the user role. You can click All to select all the permissions for a specific service or None to deselect the permissions. For any "View" permissions, the user role is granted read-only permission. For "Manage" permissions, the user role is granted read/write permission.
- Click Save & Close.
Deleting Custom Roles
To remove an existing role, complete the following:
- Go to Administration -> User Access -> Roles.
- Select the role your want to delete, and then click Remove.
- In the Remove Role dialog, click Remove to delete the role.
For more information about role-based access, see the following:
...