Accessprofile

Note: If no user management is active, this dialog is deactivated.

Users of MetaDirectory are assigned access rights to LDAP nodes via access profiles.

Accessprofile

You can add as many access profiles as you want. The button lt; Add... > creates a new profile, and then opens the profile properties.
The LDAP nodes or data sources can be added to or removed from the profile using drag-and-drop and buttons.
If an access profile is activated, the user has read rights to the assigned node. A double click, or the button lt; Properties... > open the "Properties of a profile"dialog. The button lt; Remove> deletes the selected profile.
TheDefault and Standard profiles cannot be deleted.


The Default profile is always created and all existing data sources are always assigned automatically.
The Default profile can only be activated or deactivated, but not edited further.


There is always exactly one profile that is marked as default. This profile is automatically assigned to all newly created users and groups.
The Standard property can be assigned to any other profile via the context menu of the profiles.

Properties

Exactly one access profile can be associated with a user. Any number of LDAP nodes or data sources can be assigned to an access profile.
An accessprofile is identified by its name.
An accessprofile might have an description.
If an access profile is activated, reading is allowed on this profile.
Deactivated access profiles are displayed with a grey symbol.
The profile with the Standard property is displayed with a solid symbol.

Restrictions

Setting a restriction in the access profile means for a group: the restriction applies to all users of the group.
If the restriction is not set, this does not mean a general permission for all users of the group, but the individual setting in the access profile of the users applies.