Xerox 7675 - Manual (Page 121)

119
Configure Authorization Access (by groups) for LDAP (if desired)
LDAP server user groups can be used to control access to certain areas of the Xerox device. For
example, the LDAP server may contain a group of users called "Admin." You can configure the "Admin"
group on the device so that the members of that group will have administrator access to the device. When
a user logs in at the device with their network authentication account, the device performs an LDAP look-
up to determine if the user is a member of any groups. If the LDAP server confirms that the user is a
member of the "Admin" group, the user will have administrator access to the device.
1. If you are continuing the previous procedure (Configure Authentication for LDAP/LDAPS), click on
[Authorization Access] on the LDAP Settings screen.
2. If you have already logged out of Internet Services, or closed your browser, at a networked
workstation, open your Web browser and enter the TCP/IP address of the machine in the Address or
Location field. Press [Enter].
3. Click the [Properties] tab.
4. Enter the Administrator User name (admin) and Password (1111), if prompted.
5. Select the symbol to the left of [Connectivity].
6. Select the symbol to the left of [Protocols].
7. Select [LDAP], then click on [Authorization Access].
8. Select the [User Roles] tab.
9. In the System Administrator Access [Access Group] box, enter the name of a group, defined at the
LDAP server, that you want to provide with system administrator access to the device.
10. In the Accounting Administrator Access [Access Group] box, enter the name of a group, defined at the
LDAP server, that you want to provide with accounting administrator access to the device.
11. To verify either group, enter a name of one of the members of the LDAP server group in the User
Name box, then click [Test].
12. When done, click [Apply] or [Save].
13. Select the [Device Access] tab.
14. In the Services Pathway [Access Group] box, enter the name of a group, defined at the LDAP server,
that you want to provide with Service access to the device.
15. Repeat the process for Job Status Access and Machine Status Access.
16. To verify any of these groups, enter a name of one of the members of the LDAP server groups in the
User Name box, then click [Test].
17. When done, click [Apply] or [Save].
18. Select the [Service Access] tab, then enter the names of LDAP groups, as required, to allow access to
individual device services. Verify each group by entering a group user in the User Name box, and
clicking [Test]. When done, click [Apply] or [Save].
19. Select the [Feature Access] tab, then in the Color Copying [Access Group] box, enter the name of a
group, defined at the LDAP server, that you want to provide with Color Copying access to the device.
20. To verify the groups, enter a name of one of the members of the LDAP server group in the User Name
box, then click [Test].
21. When done, click [Apply] or [Save].
22. Select [Logout] in the upper right corner of your screen if you are still logged in as Administrator.