Open topic with navigation

# StandardRoles

A comma-separated list of standard roles that you want to enable for this role configuration.

You can use the following values:

- Admin. This role can perform administrative ACI actions.
- Query. This role can perform non-administrative ACI actions.
- ServiceControl. This role can perform administrative service actions.
- ServiceStatus. This role can perform status service actions.

NOTE:

The standard roles do not overlap. If you want a particular role to be able to perform all actions, you must include all the standard roles, or ensure that the clients, SSL identities, and so on, are assigned to all relevant roles.

You can also define more specific roles by using the Actions and ServiceActions parameters.

You define the users that belong to a particular role by using Clients, GSSPrincipals, and SSLIdentities. If a connection matches one of the allowed clients, principals, or SSL identities, they have permission to perform the operations allowed by the role.

By default, Distributed Action Handler allows the localhost client for the Admin and ServiceControl standard roles, and allows all clients for the Query and ServiceStatus roles. Setting any value for Clients, GSSPrincipals, or SSLIdentities overrides these default values.

IMPORTANT:

Make sure that you delete any deprecated `RoleClients` parameters from your configuration (where `Role` corresponds to a standard role name). If you have clients allowed in the `RoleClients` parameters, Distributed Action Handler adds these permissions to any that you specify in authorization roles.

Type: | String
Default: |
Required: | No
Configuration Section: | MyAuthorizationRole
Example: | `StandardRoles=Admin,ServiceControl`
See Also: | Clients GSSPrincipals SSLIdentities Actions ServiceActions

© 2018 Micro Focus or one of its affiliates | Send documentation feedback to Micro Focus Close Send documentation feedback To open the configured email client on this computer, open an email window. Otherwise, copy the information below to a web mail client, and send this email to swpdl.idoldocsfeedback@microfocus.com. We appreciate your feedback! Product: Topic Title: Help Topic: Feedback:

_FT_HTML5_bannerTitle.htm