Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-1801: Missing predefined login role in all child zones

Authentication Service ,  

12 April,16 at 11:07 AM

Applies to: Centrify DirectManage Access Manager Version 5.1

The predefined login role is missing from the 'Select Role' window when trying to do role assignments

When upgrading from a pre-5.1 release Access Manager to 5.1, the user needs to run 'Generate Predefined Roles' to bring in all predefined roles - the 'Unix Login' role is missing from this command.

Create a custom login role for role assignment:

1) In the Zone where a login role is required to be assigned, expand 'Authorization' in this zone and right-click 'Role Definitions', select 'Add Role'

2) In the popup window, enter a desired name and then click 'System Rights' and select 3 boxes:

- 'Password login and non-password (SSO) loin are allowed'
- 'Non password (SSO) login is allowed'
- 'Login with non-Restricted Shell'
Then click Apply and OK.

3) Right-click on this new role definition to select 'Add Rights'
4) In the popup window, select 'login-all' PAM access then OK

This new created role will behave as a predefined login role and be assigned to users/groups before the upcoming fix becomes available.

Will be fixed in the future releases of Centrify.