Introduction to Role

Roles are designed with certain privileges. For example, a specific role can gain access to some specified network resources, or make exclusive use of some bandwidth. Users and privileges are not directly associated. Instead, they are associated by roles.

The mappings between roles and users are defined by role mapping rules. In function configurations, different roles are assigned with different services. Therefore, the mapped users can gain the corresponding services as well.

System supports role combination, i.e., the AND, NOT or OR operation on roles. If a role is used by different modules, the user will be mapped to the result role generated by the specified operation.

System supports the following role-based functions:

• Role-based policy rules: Implements access control for users of different types.
• Role-based QoS: Implements QoS for users of different types.
• Role-based statistics: Collects statistics on bandwidth, sessions and new sessions for users of different types.
• Role-based session limits: Implements session limits for specific users.
• SCVPN role-based host security detection: Implements control over accesses to specific resources for users of different types.