Administering CA Output Management Web Viewer › Role Object › Working with Roles › Role Authentication › Setting the Role Authentication Method

Setting the Role Authentication Method

To change the authentication method for a Role, it must be a Basic User type. Otherwise, the mainframe security must be used.

Note: A role cannot have any sub Roles if you want to change its type to Basic User.

Follow these steps:

1. From the Administration Tab, click the Role subtab.
2. Select a Role from the Role list

   The edit Role panel is displayed.

3. Click the Definition tab in the edit Role panel.
4. Select a Role type of Basic User

   Notes:

   • Only Roles with a Role type of Basic User can use alternate authentication methods.
   • If a Role has Sub Roles, you cannot change the Role’s type to Basic User. You must first delete the Sub Roles of a Group Administrator type Role before changing its Role type.
5. Find the Role Profiles section and select the Non-Mainframe Users with a Profile option.
6. Select a Profile from the first drop-down list on the right.

   If no Profiles are listed, you must first create a Profile from the Profile tab. For more information, see Creating a New Profile object.

7. Do one of the following:
   • Select an LDAP Directory from the next drop-down to the right.

     If no LDAP Directories exist you will either have to create a new Directory or enter the attributes listed below.

   • Manually enter the LDAP attributes needed to authenticate the Role’s users.

     Enter values for LDAP Server, LDAP Port, Login Attribute, and Base DN.

     For more information, see User Authentication - Directory Settings and their Meanings

     Notes:

     • It is important to be aware that these options will be overwritten when selecting a new LDAP directory.
     • If you want to permanently retain these options, we suggest that you have a member of the System Admin Role create an LDAP Directory object. The LDAP Directory objects are retained permanently.
8. (Optional) Click the Automatic Enrollment checkbox.

   With the Automatic Enrollment option selected, any LDAP users that are authenticated with the selected LDAP setup will automatically be placed into this Role. See Auto Enrollment - LDAP

9. Click the Update button near the top right of the panel.

   The authentication parameters are saved.