Add a role

Once you have created and configured the host, user and device groups, create the roles associated with these groups.

1. Select Policy & Objects > Roles.
2. Click Add.
3. In the Name field, enter a name for the new role. If this role corresponds to an LDAP attribute value, the spelling of the role name must be an exact match for the data contained in the user's directory record and you do not need to select a group in the Groups field.
4. Click Select next to Groups. Choose one or more user or host groups by clicking on the names in the All Groups column and clicking the right arrow to move them to the Selected Groups column. Click OK to continue.
5. If you are creating a role that you do not want to have automatically assigned, but wish to assign manually or through the captive portal, then do not enter any groups.
6. Click in the Note field to add any user defined information needed for this role.
7. Click OK to save the role.
8. If this role will be used to control network access for hosts managed in Inventory and devices, go to the network device roles view and configure the role mapping there. See Network device roles.