Roles management

The "Roles Management" page allows you to view and manage all roles in SuperMap iPortal. SuperMap iPortal provides ADMIN, PORTAL_USER, PORTAL_VIEWER, and other built-in roles by default, which are used to meet basic portal construction requirements. At the same time, iPortal supports adding various custom roles, and you can grant them different permissions respectively to achieve fine-grained permission control.

Log in to the portal homepage as a portal administrator, and click Management > Security > Roles Management to enter the role management page:

• Add a role
• Delete a role
• Edit a role

Add a role

Steps to add a new custom role:

1. Click "Add role", and in the Add New Role dialog box, enter the following information:

• Role name [required parameter], which is the unique identifier of the role and cannot be repeated with other role names
• Role description: a brief description of the role

2. Assign permissions to the role. In the permission list, check the permissions to be granted to the newly created role. The iPortal permissions can be divided into normal permissions and management permissions, as shown in the attached table at the end of this page.
3. Click the "Add" button to complete the role addition

After creating a new role, you can associate it with a specific user on the "User Management" page, and the user associated with this role will have the corresponding portal permissions.

If you want to manage portal resources and users according to the organizational structure, please refer to Configuration and Use of Organizational Structure.

Delete a role

Steps to delete unwanted roles:

1. Find the role you want to delete, check it, and click "Delete role"
2. Click "Yes" in the confirmation dialog that pops up

After the role is deleted, the corresponding relationship with the user is released.

Note: iPortal built-in roles cannot be deleted.

Edit a role

Steps to modify a role's description or reassign permissions to a role:

1. Find the role that needs to be modified, click the role name to enter the role information editing page, you can modify the required information, such as the description of the role, but you cannot modify the role name.
2. If you need to change the permissions of the current role, re-check the permissions assigned to the role in the permission list.
3. After editing the role-related information, click "Save" to make the changes take effect.

Note: Permissions of iPortal built-in roles cannot be edited.。

Tabel 1 Normal permissions for iPortal built-in roles

Note:

Only when the reviewer of resource authorization in the iPortal.xml configuration file is set to "ADMIN_AND_OWNER", the administrator can assign the "My Account" > "Receive all resource access applications" permission to a role in the general permissions.

Table 2 Management permissions for iPortal built-in roles

Note:

Only portal administrators can add roles and create users. Other administrators cannot do this even if they have been granted the corresponding permissions.