Include/Exclude privileges in a role

The most important step in defining or editing a role is to ensure that you include the correct privileges for the role. In the Role form (on page 1) (or the Inherited Role form (on page 1)), the Excluded and Included list boxes display the privileges that you can include in the role and the privileges that are already included in the role, respectively. The Excluded and Included field labels also display the number of entities in each list box.

If you include a constrained privilege (on page 1) in a role, you must also include the unconstrained version of the privilege in the role. For example, if you include the Unit Actions - Update Holds/Permissions constrained by Line Operator privilege in a role, you must also include the Unit Actions - Update Holds/Permissions privilege in the role.

N4 includes the DENY privileges by default when a delegated user creates a role.

To include a privilege, you can do any of the following:

If you have a large number of entries in the Excluded field, you can use the Search text box to filter the privileges. In the Search text box, type characters to filter the entries in the Excluded field and then use any of the following methods to move the privileges from the Excluded field to the Included field:

To select adjoining privileges, press and hold the Shift key. To select non-adjoining privileges, press and hold the Ctrl key.

To exclude a privilege, you can do any of the following:

If you have a large number of entries in the Included field, you can use the Search text box to filter the privileges. In the Search text box, type characters to filter the entries in the Included field and then use any of the following methods to move the privileges from the Included field to the Excluded field:

To select adjoining privileges, press and hold the Shift key. To select non-adjoining privileges, press and hold the Ctrl key.