Appendix F: LDAP Configuration Illustration4895. Click OK. The LDAP server is saved.6. Click OK. The LDAP authentication is activated.Note: If the EMX clock and the LDAP server clock are out of sync, theinstalled TLS certificates, if any, may be considered expired. To ensureproper synchronization, administrators should configure the EMX and theLDAP server to use the same NTP server(s).Step D. Configure Roles on the EMX DeviceA role on the EMX device determines the system permissions. You mustcreate the roles whose names are identical to the user groups createdfor the EMX on the AD server or authorization will fail. Therefore, we willcreate the roles named EMX_User and EMX_Admin on the EMX device.In this illustration, we assume: Users assigned to the EMX_User role can only access the EMXdevice and view settings. Users assigned to the EMX_Admin role can both access andconfigure the EMX device because they have the Administratorpermissions.To create the EMX_User role with appropriate permissionsassigned:1. Choose User Management > Roles. The Manage Roles dialogappears.Tip: You can also access the Manage Roles dialog by clicking theManage Roles button in the Edit User 'XXX' dialog.2. Click New. The Create New Role dialog appears.3. Type EMX_User in the Role Name field.4. Type a description for the EMX_User role in the Description field. Inthis example, we type "The role can only view EMX settings" todescribe the role.5. Click the Privileges tab to select "Unrestricted View Privileges,"which includes all View permissions. The "Unrestricted ViewPrivileges" permission lets users view all settings without thecapability to configure or change them.a. Click Add. The "Add Privileges to new Role" dialog appears.b. Select the permission "Unrestricted View Privileges" from thePrivileges list.
