[Ibnemo] Network user role definition and classification.

["Lifengkai (Fengkai)" <[e-mail]>]

Hi all,

>From the discussion in the mail list, I tend to draw the conclusion that people agreed on the concept for role-based intent.
Considering the further progressing of this technical field, I would like to start this thread for the network user role definition and classification.

For the work in the role classification related field, I think the followings sequenced steps are needed:

1.     Clear specifications of "role", which includes the definitions, attributes, features etc.

2.     Types of roles for classification, based on the definitions, example of roles provided by Bert and Sue from previous emails, working out the preliminary role type list.

3.     Detailed illustrations of one role type's intent as a starting point, from the role type list, choose one typical role type, and give the illustrations.

Any comments about the above proposed steps?

And the following is the text proposed, and welcome comments again.

Step 1: Role definition:

Role is a set of network user's responsibilities for specifying the scope of their intents. A network user's intent scope is for restricting the network user's corresponding desires and requirements. Network user's intent scope is unique and specific to the network users with a particular role.

The role specifies the network user's intent by taking two dimensions into account for role attributes. The first dimension is for functional abstraction and expressions. With this dimension, the network objects with which the network users want to interact and the intent expression would be defined or restricted. The second dimension is for the authorization and accessing control. With this dimension, the network users' authority or permissions for accessing to the network objects would be defined or restricted. The second dimension is controlled via an RBAC system which takes this role dimension into account.

The network user's role is constituted of object-attribute concept. With the two pattern concept, a network user can have access or no-access to specific attributes of specific object via intended abstractions and expressions

Through the role compositional semantics, one network user can be assigned with more than one roles to enjoy a broader scope for intent expression. Network user's role may not be explicit mutually exclusive, and the role overlapping part for different network users indicates that the network users share some same desires and requirements.

Step 2: Type list of roles:
Method: I want to categorize the network user role types by analyzing one typical organization's department organizational structure. Departments are grouped with the network users' same responsibilities and requirements.
         I have talked with people from China Unicom, which I chose as the concrete organization to analyze, and I will send out our initial output later.

Step 3: Concrete intent requirements:
      Method: I want to finalize a enterprise's Virtual Wide-Area Network intent requirements as an output, which falls into the use case section in https://datatracker.ietf.org/doc/draft-hares-ibnemo-overview/.


Thanks.

Best Regards,
Fengkai