Open topic with navigation

# My Authorization Role Configuration Parameters

The individual authorization role sections contain settings that define the authorization role.

You must create a subsection for each authorization role that you define in the `[AuthorizationRoles]` configuration section.

You define the permissions that a particular role has by using StandardRoles, or by specifying the Actions, IndexActions, and ServiceActions that you want the role to be able to use. You define the users that belong to a particular role by using Clients, GSSPrincipals, and SSLIdentities.

If a connection matches one of the allowed clients, principals, or SSL identities, they have permission to perform the operations allowed by the role.

For example:

    [AuthorizationRoles]
    0=AdminRole
    1=IDOLUserRole
    2=StatusOnlyRole

    [AdminRole]
    StandardRoles=Admin,ServiceControl
    Clients=localhost
    SSLIdentities=admin.example.com
    GSSPrincipals=CONTENT01/admin.example.com@EXAMPLE.COM

    [IDOLUserRole]
    StandardRoles=User,ServiceStatus
    SSLIdentities=admin.example.com,userserver.example.com
    GSSPrincipals=CONTENT01/admin.example.com@EXAMPLE.COM,CONTENT02/userserver.example.com@EXAMPLE.COM

    [StatusOnlyRole]
    ServiceActions=GetStatus
    SSLIdentities=general.example.com

You can use the ShowPermissions action to check the permissions for a user.

IMPORTANT:

Make sure that you delete any deprecated `RoleClients` parameters from your configuration (where `Role` corresponds to a standard role name) to ensure IDOL Proxy Component allows only your authorization role permissions.

© Copyright 2019 Micro Focus or one of its affiliates | Send documentation feedback Close Send documentation feedback To open the configured email client on this computer, open an email window. Otherwise, copy the information below to a web mail client, and send this email to swpdl.idoldocsfeedback@microfocus.com. We appreciate your feedback! Product: Topic Title: Help Topic: Feedback:

_FT_HTML5_bannerTitle.htm