For more information on searching for users and groups, see “Searching for users and groups”.
5.Click OK to add the names to the Set Permissions Dialog list, then click OK again to save the changes and close the dialog.
NOTE:
Granting a user the right to administer a server does not automatically allow that user to give others the same right. To allow a user to grant administrative rights to other users, add that user to the Configuration Administrators group, as described in “Adding users to the configuration administrators group”.
5.2 Setting access permissions on console elements
There are five elements defined in the Console for access control rules:
•User and Groups Tab (viewing)
•User and Groups Tab (editing)
•Topology Tab (editing)
•Custom View Tab (editing)
•Server Security (editing)
By default, each of these Console elements has five inherited ACIs:
•Enabling anonymous access
•Default anonymous access
•Configuration administrator's modifications
•Enabling group expansions
•SIE (host) group permissions
These inherited ACIs cannot be edited, but new ACIs can be added for each Console element in addition to these defaults. Additional ACIs can limit anonymous access, for example, and change other permissions within the Directory Console, which, in turn, affects access to the Directory Server and Administration Server instances.
To create new ACIs:
1.In the top menu, select Edit then select Preferences.
2.Select the Console element from the list, and click the Permissions button.
5.2 Setting access permissions on console elements | 55 |