User permissions define the actions users have permission to perform and determine which buttons, messages, and controls they see in the Inception user interface. In most Inception Server systems, the Inception administrator assigns users with the user permissions that are appropriate for their role in using Inception.
User permissions are role-based. Each user account has one or more user roles, such as journalist or producer. Each user role has a set of permissions. The role-based permissions model enables Inception administrators to precisely define user permissions for each user, to ensure conformance to your organization’s business processes.
An Inception administrator can create user accounts and roles within Inception or imported them from a Lightweight Directory Access Protocol (LDAP) server. Inception can use a combination of created and imported user accounts and roles.
To configure user permissions, you create user roles and assign permissions to them, and then create user accounts and assign user roles to them.
User permission settings belong to the following categories, represented by tabs on the Users configuration panel:
•Manage Users — Properties related to individual users, including role assignments.
•Manage Roles — Properties related to user roles, including permissions associated with user roles.
•LDAP Configuration — Properties related to establishing connectivity with an LDAP directory server.
•LDAP User Configuration — Mappings to enable Inception to import user accounts from an LDAP directory server.
•LDAP Role Configuration — Mappings to enable Inception to import user roles (groups) from an LDAP directory server.
This chapter discusses the following topics:
•Typical User Role Permissions
•Kerberos Single Sign On Configuration
•NTLM Single Sign On Configuration
•Application Single Sign On Configuration