Novell GROUPWISE 8 - ADMINISTRATION Administration Manual page 1179

Modify object properties
another or deleting a GroupWise user from a distribution list).
Modify link information
or indirectly to Domain 3 through Domain 2).
Perform system operations
administrator-defined fields, and setting up eDirectory user synchronization).
Perform maintenance operations
analyzing and fixing user and message databases, and changing a user's client options).
Creating and Deleting Objects
The following rules apply to creating or deleting a GroupWise object (for example, domain, post
office, gateway, agent, library, resource, external entity, or distribution list):
To create a GroupWise object, the administrator must have Create object rights in the container
where he or she is creating the object. To delete a GroupWise object, the administrator must
have Delete object rights to the GroupWise object's container.
If creating or deleting the object requires modification of a second object's properties, the
administrator must have Read and Write rights to the second object's NGW: GroupWise ID
property and all other affected properties. For example, when you create a distribution list, the
list is assigned to a post office. Therefore, the administrator needs Read and Write rights to the
post office object's NGW: GroupWise ID property and NGW: Distribution List Member
property.
For information about giving a user rights to an object or an objects's properties or restricting a
user's rights to an object or an object's properties, see
and Property Rights," on page
Modifying Object Properties
Each eDirectory object has certain properties that hold information about the object. For example, a
User object includes Full Name, Given Name, Last Name, Network Address, and Title properties.
The following rules apply to modifying an object's properties:
Each object has an NGW: GroupWise ID property. The administrator must always have Read
and Write rights to the NGW: GroupWise ID property for the object being modified. Without
rights to the NGW: GroupWise ID property, no modifications can be made to any of the
object's GroupWise properties.
The administrator must have Read and Write rights to the property being modified. For
example, to change a user's visibility within the GroupWise system, the administrator requires
Read and Write rights to the user object's NGW: GroupWise ID property and NGW: Visibility
property.
If the modification affects a second object's properties, the administrator must have Read and
Write rights to the second object's affected properties. For example, when you move a user
from one post office to another, the move affects properties for 1) the User object, 2) the Post
Office object from which you are moving the user (the source post office) and 3) the Post
Office object to which you are moving the user (the target post office). Therefore, the
administrator must have 1) Read and Write rights for the User object's NGW: GroupWise ID
property and NGW: Post Office property, 2) Read and Write rights for the source post office
object's NGW: GroupWise ID property and Members property, and 3) Read and Write rights
for the target post office object's NGW: GroupWise ID property and Members property.
(for example, moving a GroupWise user from one post office to
(for example, defining whether Domain 1 links directly to Domain 3
(for example, managing software distribution directories, creating
(for example, rebuilding domain and post office databases,
Section 79.4, "Granting or Removing Object
1189.
GroupWise Administrator Rights 1179