Add a Group to a Delegated Administration Role

A group is a static collection of users that administrators set up and maintain in the WebLogic Administration Portal or LDAP. A Delegated Administration role is a dynamic classification of users that is determined by the expressions, or characteristics, that you define in the administration portal as well. When you add a group of users to a role, you grant that collective group of users access to all of the administrative rights attributed to that role.

ROD - is this correct about users and how they are maintained in LDAP?

To add a group to a Delegated Administration role:

  1. In the Delegated Administration Resource tree, select the role to which you want to add groups of users.
  2. Select the Add Groups to Role tab.
  3. Select the group you want to add by clicking the arrow to the right of the group name. The selected group now appears in the Edit box. Repeat these steps to select multiple groups.
  4. Click the check box next to each group to select it, and click Add Group(s) to Role button.
  5. Click the Role Properties tab and confirm that the groups have been successfully added to the role.

Note: When you are establishing your role hierarchy, keep in mind that child roles within a Delegated Administration role must be unique. For example, you cannot have a Delegated Administration role called RoleA with a child role of Role 4 if you already have a child role called Role 4 elsewhere in the hierarchy.

Related Topics: