Appendix B: Role-based security tool

The individual security roles of a vault can be maintained as described in Creating and editing security roles. They are assigned as described in the BlueCielo Meridian Enterprise User's Guide.

However, there are situations in which working with the roles individually can be tedious and inconvenient:

Reviewing all security roles for missing assignments
Clearing all security roles from a vault
Copying the security roles from one vault to another

The Meridian Enterprise role-based security tool (RBSTool.exe) is provided to make these tasks easier. The tool is installed by default in the Meridian Enterprise folder at C:\Program Files\BC-Meridian\Program.

To start and configure the tool:

Start the program from Windows Explorer. If you will be clearing or importing security assignments, run the tool under the Meridian Enterprise rescue account. This ensures that the tool will have sufficient privileges to modify the role assignments. For more information about the account, see the BlueCielo Meridian Enterprise Administrator's Guide. The program window opens. The account under which the program is running is shown in Current User.
If the name of the vault that you want to work with is not shown in the status bar at the bottom of the window, click Browse and select the correct vault.
Click options or type values using the descriptions in the following table.

Role-based security tool options
Option	Description
Select a file to store the role assignment information	If you want to export or import role assignments, accept the default path or click Browse and specify a location and filename.
Find security enclosures by path
Assume cleared vault, don’t process empty enclosures	Skips folders in the import file that have no security assignments, thereby reducing processing time. This option assumes that the corresponding vault folders either: Already have no security assignments because they have already been cleared. You do not want the tool to create new, empty folders

To export the current security assignments:

Click Export. The name of each folder appears in the textbox at the bottom of the window as it is processed. A confirmation dialog box appears when processing is complete.

The assignments are saved in XML format to the file specified in the preceding table. You can open the file in a web browser to view or print the information. The file contents will be transformed and formatted using the styles that are defined in security report.xslt.

To remove all existing security assignments:

Click Clear. A confirmation dialog box appears.
Click Yes.The name of each folder appears in the textbox at the bottom of the window as it is processed. A confirmation dialog box appears when processing is complete.

To import role assignments from an XML file that was created by the tool:

Warning The role assignments that are imported will replace all existing role assignments for each folder, not add to them. Be sure that no critical role assignments will be lost if you proceed.

Confirm that the file that you want to import the assignments from is specified as described in the preceding table.
Click Import. A confirmation dialog box appears.
Click Yes. The name of each folder appears in the textbox at the bottom of the window as it is processed. A confirmation dialog box appears when processing is complete.