TOL Role-Based Account Administration

1. TOL Role-BasedAccount Administration For 28 Dec 2003 TOL Update

2. Role-based System • TOL has improved the security of the system by moving from a permission-based to a role-based administration system • Roles are groups of permissions

3. What SAs Can Do • Administer specific roles; SAs can assign the respective roles to users • Current preset permissions for the existing TOL Manager roles are maintained under the new Roles and Registration TOL update • Multi-MTF registration, search, and account administration (This functionality partially replaces the need for *_mtfsysmgr accounts)

4. What SAs Cannot Do • Access and assign all roles to every user, to include themselves • SAs cannot access specific role functionality unless the role is assigned to that particular SA

7. 1 2

13. Notes • The new multi-MTF capability allows MTF SAs to search for users within the MTFs that the SA selected during his/her own registration. • Therefore, anyone serving as an MTF SA, during registration,should assign themselves all the MTFs, within their region, that the users they administer may need. • MTF SA access to available roles and MTFs they can administer and assign to other users is determined by the default roles and the MTFs the SAselected during his/her own registration.

14. Lesson Summary In this lesson you learned to: • Administer accounts in TOL using roles • Use Desktop Tools > Administer Accounts to access TOL accounts • Search for user accounts • Add/Remove role(s) to user accounts • Add/Remove MTF(s) to user accounts