Configuring Roles¶

By default, successfully authenticated users are assigned the "user" role. However, this can be overridden by creating a vendor specific attribute. The attribute should contain a string containing a colon or comma separated list of roles (like "admin:can_delete"). Re-run setup on the RADIUS auth app and configure the app to use the vendor code and vendor attribute ID you defined.

Below are instructions for configuring IAS:

Open the IAS MMC Snap-In¶

Start the "mmc"

Open the Remote Access Policy¶

Selected "Remote Access Policies" and open the appropriate policy.

Create a New Attribute¶

Create a new attribute with a value of "Vendor-Specific" and a vendor of "RADIUS Standard".

Select a format of string and set the value to a colon separated list of roles.

The created attribute should look something like this: