General

GUI Reference: Role Ancestors

This page contains information about a single role and its ancestor roles. It provides functionality for adding and removing parent roles.

Important Note: the CodeSonar Web GUI makes extensive use of JavaScript. Make sure JavaScript is enabled in your web browser.

Navigating to

From Role Users: Click the Ancestor Roles tab above the table of users.
URL http://hub_location/role/role_id-ancestors.html

Page Properties

Output formats CSV, JSON, XML (role_ancestors.xsd)
Visibility Filter Applied none
RBAC Permissions Needed
Page AccessG_ADMINISTER_USERS
ROLE_READ
Page Contents/FunctionalityG_ADMINISTER_USERS
ROLE_ASSIGN
ROLE_DELETE
ROLE_WRITE

Page Contents

The following annotated screenshot shows the various parts of a Role Ancestors page.

Annotated Screenshot: Roles Page standard header breadcrumbs page heading page heading table legend table legend links role details table of roles Save Changes and Clear Changes buttons standard footer

Standard Header See GUI Reference: Standard Header.
Breadcrumbs Home > Settings > Roles > Role_Name
Where
Page Heading Role : Role_Name
Links Links to other RBAC-related pages: Users, Roles, Global Role-Permissions, Root Project Tree Permissions, Root Launch Daemon Group Permissions. The latter two links are to the Resource Role-Permissions pages for the root project tree and root launchd group, respectively.
Role Details Information about the role described on this page.
Role The role name.
Description The role description.
Edit functionality for the role name and description requires at least one of the following permissions: G_ADMINISTER_USERS, ROLE_WRITE R for this role R.
Role Table A table with one row for each other role on the hub.

The available table columns are as follows. Columns displayed by default are marked with an asterisk (*).

Column Label Column Data
Is Ancestor * Contents depend on whether or not the role described in each row is a parent or other ancestor of the current role.

The table legend shows how each of these cases is rendered in the table.
screenshot fragment: role-permissions legend

Note that for performance reasons, roles that are only parents are frequently shown as "parent and possibly grandparent".

To add or remove a parent role, click the corresponding table cell to add or remove the bold (parent) checkmark, then click Save Changes. This requires either at least one of the following permission sets.

Note that you will not be able to assign parent roles to built-in role Enabled.
ID Role ID
Role * Role Name
Description * Role Description
"Save Changes" and "Clear Changes" buttons [With G_ADMINISTER_USERS permission only.]
If you have clicked in one or more of the Is Ancestor cells to add or remove parent roles, the "<num> pending change(s)" notification under the table will update to show how many changes you have made since you loaded or reloaded the page.

Click Save Changes to save your changes and reload the page to show the effects of your changes.

  • If you have added a parent role R, the row for R will now have a "parent and possibly grandparent " check.
  • If you have removed a parent role R, the row for R will no longer have a "parent" check. It will still have an "grandparent, etc " check if and only if R is an ancestor of one of the remaining parent roles.
Click Clear Changes to restore the table to the state it was in when you loaded or reloaded the page.
Standard Footer See GUI Reference: Standard Footer.

Edit Role Details

You can change the role name and description from the role details section of the page.

Change the Role Name

Changing the name for role R requires at least one of the following permissions: G_ADMINISTER_USERS, ROLE_WRITE R.
The names of immutable roles cannot be changed.

  1. Click edit (next to the current name). An editing form will open, as in the example below.

    screenshot fragment: description editing form expansion
    The text field will contain the current role name.

  2. Enter a new name (or edit the existing one) in the text field.
  3. Click Save to save your changes, or Cancel to cancel the changes and close the editing form.
  4. The page will be redisplayed.

Change the Role Description

Changing the description for role R requires at least one of the following permissions: G_ADMINISTER_USERS, ROLE_WRITE R.

The procedure for changing a role's description is very similar to that for changing its name. The differences are as follows.

Delete The Role

Deleting a role R requires either ROLE_DELETE R or G_ADMINISTER_USERS permission.
Immutable roles cannot be deleted.

Any users for which this was the default role will have their default role set to Anyone.

  1. Click on the remove this role link on the first line of the role details section.
    A confirmation dialog will open.
  2. Click Remove to remove the role, or Cancel to cancel removal and close the confirmation dialog.

Navigating from

to Global Role-Permissions Click Global Permissions in the link bar (under the page heading).
to Roles Click Roles in the link bar (under the page heading).
to Role Ancestors Click the role name, ID, or description in the table.
to Users Click Users in the link bar (under the page heading).

Related Tasks