Administration Guide › Set Up Groups and Roles › Examples: Dynamic Groups and Roles in Democorp › Example: Enable Dynamic Roles in Democorp

Example: Enable Dynamic Roles in Democorp

This example shows how to enable dynamic roles in Democorp. To enable roles, you need to change the DSA's settings, which means that you have to stop and start the DSA. These instructions also describe how to identify which settings file is used by the Democorp DSA.

To enable dynamic roles in the Democorp DSA

1. Identify which settings file is used by Democorp. To do this:
   1. Open Democorp's initialization file in a text editor.
   2. Find the schema file statement. By default, this statement is :

      	source "../settings/dxmanager.dxc"; 
      

      This means that when the Democorp DSA starts, it uses the settings in settings/dxmanager.dxc. You need to add the role commands to this file.

2. Stop the Democorp DSA.
3. Add the commands to enable dynamic roles to the Democorp settings file. To do this:
   1. Ensure that the settings file is writable, and then open it in a text editor.
   2. Add the following lines to the file:

      	#roles
      	set role-subtree = <c AU><o Democorp><ou Groups>;
      	set use-dynamic-roles = true;
      

      If this file already includes the set use-dynamic-roles = true command, you can leave it there. A DSA can contain both static and dynamic roles.

   3. Close and save the settings file.
4. Start the DSA.

   The Democorp DSA can now use dynamic groups as roles. You can now set limits or access controls for any such groups you have created.