Roles

Rights Management App adds a new abstraction layer called roles. Roles can be used to control access of users and groups and to apply time limited memberships. In this guide we will learn how to create a role in Rights Management App.

Create a Role

To create a Role in Rights Management App you have to go to the Roles list and click the New button on the upper left corner of the screen.

Give a meaningful name to the Role and select the domain in which the role will be submitted. You can choose a valid to date from which date the role will be available and a valid to date which will be the date the role will be no longer functional. Then click on Submit.

Assign role to group

Once the role is submitted you can navigate back to the form. There are four related lists created from where you can add users and groups. The first two with name “Groups” and “Users” refer to your Active Directory, while the other two “Azure AD M2m Roles Groups” and “Azure AD M2m Users Roles” refer to your Azure Active Directory. Navigate to the groups related list and click on Edit… to give to an existing group the Role you created.

Select the group from the list on the left of the screen and click on Save.

Assign role to user

Navigate to the role you created and click on the Edit… button on the Users related list. From there you can give to an existing user the role.

Select the user from the list on the left of the screen and click on Save.

Now the user has the Role IT Support and the user became member of the Group IT Group as they have the same role. You can confirm this by navigating to the users form and checking if the group is in the Active DIrectory Group Member related list and the Group Membership Changes related list should have a record “Added to group”.

The valid from and valid to date can be set for each Azure Active Directory Group and Azure Active Directory User specifically. This means that when user is added to a role with a valid to and a valid from date this role will be functional only for the time period selected. When the valid from date comes the user will be assigned to the role and will become member of the groups that have the same role. When the valid to date comes those memberships will be removed.