How to Add Users to Predefined Roles
Follow these steps to add users to the Catalog Authorization policy roles. The following table shows the tasks that these roles perform.
Role |
Tasks the user can perform |
|---|---|
CatalogAdministrator |
Manages and performs any activity in the Catalog System. |
CatalogManager |
Manages and performs any activity on all catalogs in the Catalog System. |
CatalogSystemViewer |
Views catalogs and categories in the Catalog System. Cannot perform updates to the catalog content. |
Note
Before you assign users access to the Authorization Manager policy, we strongly recommended that you assign the users to a Windows group, and then give the Windows group Authorization Manager permissions on both Catalog and Marketing Web services.
To add a user to a predefined role in the Authorization policy
Click Start, click Run, type azman.msc, and then click OK.
In the Authorization Manager screen, right-click Authorization Manager, and then click Open Authorization Store.
In the Open Authorization Store dialog box, verify that the XML file option is selected, and then click Browse to move to where the authorization policy for your catalog Web service is located, for example, <drive>:\Inetpub\wwwroot\CatalogWebService.
Select CatalogAuthorizationStore.xml, click Open, and then in the Open Authorization Store dialog box, click OK.
Expand the Authorization Policy to \CatalogAuthorizationStore.xml\ProductCatalogSystem\RoleAssignments\.
Right-click CatalogAdministrator, and then click Assign Windows Users and Groups.
In the Select Users, Computers, or Groups dialog box, in the Enter the object names to select box, type the name of the user you want to manage the Catalog System, and then click OK.
Repeat Steps 6-7 for all the users for whom you want to manage catalogs in the Catalog System.
The users can now manage catalogs in the Catalog System.
To add the appropriate users to the CatalogSystemViewer role and the CatalogManager role, repeat steps 6-7. Users added to the CatalogSystemViewer role can view catalogs in the Catalog System. These users cannot perform catalog updates.
Note
Repeat these steps to add users to the predefined Marketing authorization roles.
See Also
Other Resources
Authorization Manager Policy Access