119Configure Authorization Access (by groups) for LDAP (if desired)LDAP server user groups can be used to control access to certain areas of the Xerox device. Forexample, the LDAP server may contain a group of users called "Admin." You can configure the "Admin"group on the device so that the members of that group will have administrator access to the device. Whena user logs in at the device with their network authentication account, the device performs an LDAP look-up to determine if the user is a member of any groups. If the LDAP server confirms that the user is amember of the "Admin" group, the user will have administrator access to the device.1. If you are continuing the previous procedure (Configure Authentication for LDAP/LDAPS), click on[Authorization Access] on the LDAP Settings screen.2. If you have already logged out of Internet Services, or closed your browser, at a networkedworkstation, open your Web browser and enter the TCP/IP address of the machine in the Address orLocation field. Press [Enter].3. Click the [Properties] tab.4. Enter the Administrator User name (admin) and Password (1111), if prompted.5. Select the symbol to the left of [Connectivity].6. Select the symbol to the left of [Protocols].7. Select [LDAP], then click on [Authorization Access].8. Select the [User Roles] tab.9. In the System Administrator Access [Access Group] box, enter the name of a group, defined at theLDAP server, that you want to provide with system administrator access to the device.10. In the Accounting Administrator Access [Access Group] box, enter the name of a group, defined at theLDAP server, that you want to provide with accounting administrator access to the device.11. To verify either group, enter a name of one of the members of the LDAP server group in the UserName box, then click [Test].12. When done, click [Apply] or [Save].13. Select the [Device Access] tab.14. In the Services Pathway [Access Group] box, enter the name of a group, defined at the LDAP server,that you want to provide with Service access to the device.15. Repeat the process for Job Status Access and Machine Status Access.16. To verify any of these groups, enter a name of one of the members of the LDAP server groups in theUser Name box, then click [Test].17. When done, click [Apply] or [Save].18. Select the [Service Access] tab, then enter the names of LDAP groups, as required, to allow access toindividual device services. Verify each group by entering a group user in the User Name box, andclicking [Test]. When done, click [Apply] or [Save].19. Select the [Feature Access] tab, then in the Color Copying [Access Group] box, enter the name of agroup, defined at the LDAP server, that you want to provide with Color Copying access to the device.20. To verify the groups, enter a name of one of the members of the LDAP server group in the User Namebox, then click [Test].21. When done, click [Apply] or [Save].22. Select [Logout] in the upper right corner of your screen if you are still logged in as Administrator.
