Nortel Networks 4050 manual Verify and apply the changes

364Chapter 8 Managing system users and groups

9Remove the admin user from the certadmin group.

Again, this step is only necessary if you want to fully separate the Certificate Administrator user role from the Administrator user role. Note however, that once the admin user is removed from the certadmin group, only a user who is already a member of the certadmin group can grant the admin user certadmin group membership anew.

When the admin user is removed from the certadmin group, only the Certificate Administrator user can access the Certificate menu (/cfg/cert).

>>User# edit admin

>>User admin# groups/list

1:admin

2:oper

3:certadmin

>>Groups# del 3

Note: It is critical that a Certificate Administrator user is created and assigned certadmin group membership before the admin user is removed from the certadmin group. Otherwise there is no way to assign certadmin group membership to a new user, or to restore certadmin group membership to the admin user, should it become necessary.

10Verify and apply the changes.

>>Groups# list

Old:

1:admin

2:oper

3:certadmin Pending:

1:admin

2:oper

>>Groups# apply

320818-A