31 lines
2.0 KiB
Properties
31 lines
2.0 KiB
Properties
# -- defines which role is allowed to modify or delete which other role
|
|
# ---------------------------------------------------------------------
|
|
|
|
# -- not used
|
|
nevisIdm.SelfAdmin=
|
|
nevisIdm.Impersonator=
|
|
nevisIdm.TechUser=
|
|
nevisIdm.BatchJobAdmin=
|
|
nevisIdm.SoapTechAccessReadOnly=
|
|
nevisIdm.EnterpriseRoleOwner=
|
|
nevisIdm.MainAppOwner=
|
|
|
|
# -- low priviledge, not accessing users or not modifiying them
|
|
nevisIdm.Helpdesk=nevisIdm.SelfAdmin
|
|
nevisIdm.TemplateAdmin=nevisIdm.SelfAdmin
|
|
nevisIdm.UserAndUnitAdmin=nevisIdm.SelfAdmin
|
|
nevisIdm.AppAdmin=nevisIdm.SelfAdmin
|
|
|
|
|
|
# -- medium priviledge admin tasks
|
|
nevisIdm.UserAdmin=nevisIdm.UserAdmin,nevisIdm.SelfAdmin,nevisIdm.Helpdesk,nevisIdm.TemplateAdmin,nevisIdm.UserAndUnitAdmin,nevisIdm.AppAdmin,nevisIdm.AppOwner
|
|
nevisIdm.AppOwner=nevisIdm.AppOwner,nevisIdm.UserAdmin,nevisIdm.SelfAdmin,nevisIdm.Helpdesk,nevisIdm.TemplateAdmin,nevisIdm.UserAndUnitAdmin,nevisIdm.AppAdmin
|
|
nevisIdm.EnterpriseRoleAdmin=nevisIdm.EnterpriseRoleAdmin,nevisIdm.UserAdmin,nevisIdm.SelfAdmin,nevisIdm.Helpdesk,nevisIdm.TemplateAdmin,nevisIdm.UserAndUnitAdmin,nevisIdm.AppAdmin,nevisIdm.AppOwner
|
|
nevisIdm.ClientRoot=nevisIdm.ClientRoot,nevisIdm.UserAdmin,nevisIdm.SelfAdmin,nevisIdm.Helpdesk,nevisIdm.TemplateAdmin,nevisIdm.UserAndUnitAdmin,nevisIdm.AppAdmin,nevisIdm.AppOwner
|
|
|
|
# -- tech user access
|
|
nevisIdm.SoapTechAccess=nevisIdm.SelfAdmin,nevisIdm.UserAdmin,nevisIdm.UserAndUnitAdmin,nevisIdm.MainAppOwner,nevisIdm.AppOwner,nevisIdm.Helpdesk,nevisIdm.TechUser,nevisIdm.AppAdmin,nevisIdm.SoapTechAccess,nevisIdm.SoapTechAccessReadOnly,nevisIdm.TemplateAdmin,nevisIdm.EnterpriseRoleOwner
|
|
|
|
# -- priviledged account, high priviledge admin tasks, only exceptional usage
|
|
nevisIdm.Root=nevisIdm.SelfAdmin,nevisIdm.UserAdmin,nevisIdm.UserAndUnitAdmin,nevisIdm.MainAppOwner,nevisIdm.AppOwner,nevisIdm.Helpdesk,nevisIdm.TechUser,nevisIdm.AppAdmin,nevisIdm.SoapTechAccess,nevisIdm.SoapTechAccessReadOnly,nevisIdm.Root,nevisIdm.TemplateAdmin,nevisIdm.ClientRoot,nevisIdm.Impersonator,nevisIdm.EnterpriseRoleAdmin,nevisIdm.EnterpriseRoleOwner
|