Assign the role as a computer-level override

In most cases, a role definition of this type is assigned to a specific computer rather than applied to all computers in a zone.

To make a role assignment on an individual computer:

  1. Open Access Manager.
  2. Expand Zones and the individual parent or child zones required to select the zone name that contains the computer for which you want to define a computer-level role assignment.
  3. Expand Computers, then select the specific computer on which you want to make a role assignment.
  4. Select Role Assignments, right-click, then click Assign Role.
  5. Select the role definition you created for temporary root access, such as emergency_access, then click OK.
  6. Click Add AD Account to search for and select the Active Directory user who should have temporary root access:

    • Leave User as the object to find.
    • Optionally, type all or part of the use name.
    • Click Find Now.

    Select the user in the results, then click OK.

  7. Deselect Start immediately and set a specific Start time for the role assignment.
  8. Deselect Never expire and set a specific End time for the role assignment.
  9. Click OK.