The Authorization Manager is a mechanism for an administrator to delegate control of different parts of the Suite to different administrators. The Authorization Manager uses an MMC snap-in to control the delegation of tasks, which are pre-defined in an XML file provided by triCerat.
The enable the Authorization Manager, go to the Tools->Options Menu, and select security. Under the security menu, check the box to enable the authorization manager and select the authorization store, which is provided by triCerat. If no path exists, the xml file is included in the path below:
Use the Test button to ensure that the current user will still have rights to use the Simplify Console after making these changes.
To define roles for administrators, go to Start->Run and type mmc. When that is opened, go to File->Open, and open the file Program Files\triCerat\Simplify Suite\Simplify Console\SimplifySuite.msc, if you see the following error, click OK:
Then you should see the following screen. Right click on the Authorization Manager and select 'Open Authorization Store':
Select the XML file radio button and specify the path below to the Authorization Store XML file:
There is a lot of documentation on the web about how to use the Microsoft Authorization Manager. For this document, we will define a role for our Print Managers. We will first want to define the Print Manager role:
Fill in the information for the role name and description, then click the Add button to add roles. You can define roles, tasks, and operations to the role. Below is an example configuration for a Print Manager role. Note the 'Run Simplify Console' task, this is important to allow the print managers to open the Simplify Console:
Now we need to assign the new role to a group or user in the active directory. To do this, we select the role assignments category, and select 'Assign Roles':
Now we select the Print Manager role and click ok. Now the Print Manager role shows up in the Role Assignments category. We can right click to assign Windows Users and Groups. We can put the group or user name in here and hit ok. Now that AD group will have access in the Simplify Suite to create and assign Printing objects. For more information on this topic, see the links below.
Related Topics