Groupwise Administrator Rights; Setting Up A Groupwise Administrator As An Admin Equivalent; Assigning Rights Based On Administration Responsibilities - Novell GROUPWISE 7 - SECURITY ADMINISTRATION Manual

GroupWise Administrator Rights

7 5
To administer GroupWise
rights. The following sections provide information to help you configure GroupWise administrator
rights to meet the needs of your environment:
Section 75.1, "Setting Up a GroupWise Administrator as an Admin Equivalent," on page 1135
Section 75.2, "Assigning Rights Based on Administration Responsibilities," on page 1135
Section 75.3, "eDirectory Object and Properties Rights," on page 1143
Section 75.4, "Granting or Removing Object and Property Rights," on page 1146
See also Part XVI, "Security Policies," on page
75.1 Setting Up a GroupWise Administrator as
an Admin Equivalent
The easiest way to ensure that a GroupWise administrator has all necessary eDirectory rights and
NetWare file system rights is to make the administrator an Admin equivalent. Unless you have
implemented multiple administrators who have different roles and access rights (for example, a
server administrator, a printer administrator, and a GroupWise administrator), we suggest you make
your GroupWise administrator an Admin equivalent.
®
1 In ConsoleOne
, right-click the GroupWise administrator's User object, then click Properties.
2 Click the Memberships tab, then click Security Equal To to display the Security Equal To page.
3 Click Add to display the Select Objects dialog box.
4 Browse for and select the Admin object, then click OK.
The Admin object should now be displayed in the Security Equal To list.
5 Click OK.
75.2 Assigning Rights Based on Administration
Responsibilities
Making a GroupWise administrator an Admin equivalent gives the GroupWise administrator all
eDirectory rights required to administer GroupWise. It will also give him or her full file system
rights to NetWare servers. To increase security or to support a distributed administration model, you
can restrict GroupWise administrators' file system and eDirectory rights to only those required to
administer GroupWise and assign rights to your GroupWise administrators based on their
administration responsibilities. For example,
If you have only one GroupWise administrator (a centralized GroupWise administration
model), you can give the administrator rights only to the eDirectory objects and file systems
that are used for GroupWise.
If you have multiple administrators who are each responsible for a domain (a distributed
GroupWise administration model), you can restrict their rights to only those eDirectory objects
and file systems associated with their GroupWise domain.
®
, a user needs the appropriate file system rights and Novell
1159.
75
®
eDirectory
TM
GroupWise Administrator Rights 1135