How to Add an Individual User to an Authorization Policy Role
Follow these steps to add an individual Windows user account to an Authorization policy role.
To add an individual user to a role
Click Start, click Run, type azman.msc, and then click OK.
In the Authorization Manager screen, right-click Authorization Manager, and then click Open Authorization Store.
In the Open Authorization Store dialog box, verify that the XML file option is selected, and then click Browse to move to where the authorization policy for your catalog Web service is located, for example, <drive>:\Inetpub\wwwroot\CatalogWebService.
Select CatalogAuthorizationStore.xml, click Open, and then in the Open Authorization Store dialog box, click OK.
Expand the Authorization Policy to \CatalogAuthorizationStore.xml\CatalogandInventorySystem\Role Assignments\<Role name>.
Right-click the appropriate role, and then click Assign Windows Users and Groups.
In the Select Users, Computers, or Groups dialog box, in the Enter the object names to select box, type the name of the user, and then click OK.
Note
In a SharePoint 2010 deployment, perform an IIS reset after making changes to authorization stores in AzMan. The IIS reset forces user claims to refresh.
You have successfully added the user account to the appropriate role.
See Also
Other Resources
Authorization Manager Policy Access
Managing Authorization Policies
What is Commerce Server Operations?
Cannot Use Silverlight Web Tools After Making Updates to Authorization Stores