Set up roles in CEE

To get a CEE site ready for Lab Management, you need to create several specially-named roles on the site.

1. Log into the CEE site as a Host Admin or a Domain Admin.
2. Navigate to Administration > Roles. For example, https://www.cee.example.com/servlets/RoleList.
3. Click the Add a new role link to add the role for regular Lab Management users.

   These are the users who you want to assign basic login access to hosts within the project.

   • Name: Lab Management - User Access
   • Description: User-level access to Lab Management systems for this project
   • Requestable: Yes/No (your preference)
   • Ownership role: No
   • Grant role on subproject creation: Yes/No (your preference)
   • Block recursion into private projects: Yes/No (your preference, suggest Yes)
   • Permissions: Leave this section of the role blank because it does not need any permissions
4. Click the Add a new role link to add the role for root access Lab Management users.

   These are the users who you want to assign root access to hosts within the project.

   • Name: Lab Management - Root Access
   • Description: Root-level access to Lab Management systems for this project
   • Requestable: Yes/No (your preference)
   • Ownership role: No
   • Grant role on subproject creation: Yes/ No (your preference)
   • Block recursion into private projects: Yes/ No (your preference, suggest Yes)
   • Permissions: Leave this section of the role blank because it does not need any permissions
5. Click the Add a new role link to add the role for Lab Management Project Admin users.

   These are the users who you want to assign root access and the ability to allocate and reallocate hosts within the project.

   • Name: Lab Management - Project Admin
   • Description: Lab Management Project Administrator. Can allocate/release machines, change profiles, lock/unlock machines.
   • Requestable: Yes/No (your preference, suggest No)
   • Ownership role: No
   • Grant role on subproject creation: Yes/ No (your preference, suggest No)
   • Block recursion into private projects: Yes/ No (your preference, suggest Yes)
   • Permissions: Leave this section of the role blank because it does not need any permissions
6. Click the Domain tab.
7. Click the Add a new role link to add the role for the Lab Management Domain Admin users.

   These are the users who you want to assign root access and the ability to allocate and reallocate hosts within the project.

   • Name: Lab Management - Domain Admin
   • Description: Lab Management Domain Administrator. Can allocate/release machines, change profiles, lock/unlock machines.
   • Ownership role: No
   • Block recursion into private projects: Yes/No (your preference, suggest Yes)
   • Permissions: Leave this section of the role blank because it does not need any permissions