Roles

Here are the steps to configure role:

Create a Role

The configuration items are as follows:

Field	Description
Name	A friendly identifier for the new role
Description	A brief text to explain the characteristics of the role
Allowed Modules	Select the required modules and sub modules to include in this role and set their permissions (i.e. Read, Add/Edit, and Delete) accordingly. The administrators with this role would be able to access the allowed (selected) modules only along with the respective fine grained authorization.

The Administrator can Edit/Delete (options available by pressing the button) an existing role from the Access Control screen.

The role configurations for ADSS Web RA are as follows:

Modules / Roles	Super Administrator	Security Offier	Admin RAO	Enterprise RAO	Auditor
'Type' in ADSS Web RA Access Control	Administrator	Administrator	Admin RAO	Enterprise RAO / LRAO	Administrator
System	Read, Write	Read	None	None	Read
Configurations	Read, Write	Read	None	None	Read
Agreements	Read, Write	Read	None	None	Read
Vetting Forms	Read, Write	Read	None	None	Read
EYternal Services	Read, Write	Read	None	None	Read
Service Plan	Read, Write	Read	None	None	Read
Enterprises	Read, Write	None	Refer to the table below	Refer to the table below	Read
Users	Read, Write	None	Refer to the table below	Refer to the table below	Read
Requests	Read, Write	None	Refer to the table below	Refer to the table below	Read
Dual Control	Read, Write	None	None	None	Read
Certificates	Read, Write	None	Refer to the table below	Refer to the table below	Read
Access Control	Read, Write	Read	None	None	Read
TSP Accounts	None	None	None	None	None
Logs	Read, Write	None	Refer to the table below	Refer to the table below	Read
Archive Mode	Read, Write	Read	Refer to the table below	Refer to the table below	Read

Here 'Y' means you need to enable this option in the Role.

and 'X' means either the option is not available or you need to uncheck it.

Here 'Y' means you need to enable this option in the Role.

and 'X' means either the option is not available or you need to uncheck it.