Working with computer roles

In previous chapters a role definition described a specific set of access rights for a user or group, including the period of time when those access rights were in effect. A computer role is an association that enables you to make the most of those role definitions. Role definitions grant specific access rights or enforce certain access restrictions. Computer roles enable you to associate role definitions with computers that share a similar function or have a common attribute. This chapter describes how you can configure and use computer roles to manage access rights for different sets of users.