Administering the Kerberos Server

Administrative PermissionsAdministrative Permissions

You can assign administrative permissions using the Administrative Permissions window. Choose Principal Information>Edit, and select the Edit Administrative Permissions option to display the Administrative Permissions window (Figure 8-11). You can assign different levels of permissions in any combination or all the permissions to a single user.

Figure 8-11 Administrative Permissions Window

You can assign eight permissions in the KDC for the current realm or for all realms. If you assign permissions only for the current realm, the administrator can perform administrative tasks only within the realm. You can use the Restricted Administrator modifier in conjunction with

Chapter 8

189