Using Notification Manager › Secure the Notification Website › User Authorization › Advanced Permissions Mode › Manage Advanced Permissions

Manage Advanced Permissions

The Notification Website uses an external LDAP-compliant directory service to support the Advanced Permissions authorization mode. The permissions data is stored externally in the directory. The external directory server product provides you with tools to administer and manage the directory and the data.

The Notification Website uses the LDAP protocol to communicate with the directory for the permissions data. This open standard allows CA Automation Point to provide you with the fine granularity of authorization control, without restricting your directory choice to any particular product or vendor. Please refer to the documentation supplied with your particular directory product for directory related technical guidance and specific assistance.

More information about the Lightweight Directory Access Protocol (LDAP) follows:

• A directory is a specialized database supporting hierarchical tree-like data structures.
• LDAP Runs over TCP/IP.
• Directories are typically optimized for large volume reading and searching.
• LDAP is an open standard that has wide industry support.
• Many vendors currently offer LDAP-compliant directory products and services, including CA, which offers CA Directory, and Microsoft Corporation, which offers Active Directory.

The Notification Website uses the LDAP protocol to communicate with the directory for the permissions data. This open standard allows CA Automation Point to provide you with the fine granularity of authorization control, without restricting your directory choice to any particular product or vendor. Please refer to the documentation supplied with your particular directory product for directory related technical guidance and specific assistance.

The following is a list of general actions you can take to manage the Advanced Permissions in your directory, assuming that you have successfully configured basic privileges for the login users and have successfully installed the directory on a server that the AP server has TCP/IP access to:

• Survey your website users to determine their responsibility hierarchy and decide who should have what access to whom. Use the survey to decide upon the hierarchical branching layout if one is necessary. Design permissions policies with a focus on long term success.
• Extend the directory with the CA Automation Point Notification Manager Advanced Permissions schema, using the tools provided by the directory product.
• Put the Advanced Permission data into the directory using the tools provided by the directory product.
• Enable the Advanced LDAP Permission in CA Automation Point.
• Gradually disable the basic privileges that were previously granted and can be replaced by the advanced permissions.

The following sections provide you with detailed information about the object definitions used to implement the Advanced Permissions for the website, the recommended branching layout in the directory information tree, and a few scenarios to illustrate how to set up your site.