Novell GROUPWISE 8 - ADMINISTRATION Administration Manual page 1180

Modifications to an object can fail for the following reasons:
The administrator does not have the appropriate rights to the object's properties. For example,
to restrict an administrator from moving a user from one post office to another, you could 1) not
give the administrator Read and Write rights to the source or target post office object's NGW:
Members property or 2) not give the administrator Read and Write rights to the user object's
NGW: Post Office property.
The administrator, in addition to modifying properties he or she has rights to, attempts to
modify a property he or she does not have rights to modify. For example, if an administrator
has rights to modify a user's mailbox ID and visibility but does not have rights to modify the
mailbox expiration date, any modifications made to the mailbox ID and visibility fail if the
administrator tries to modify the mailbox expiration date at the same time.
In general, a GroupWise administrator should have Read and Write rights to all GroupWise
properties for the objects he or she needs to administer. This ensures that the administrator can
modify all GroupWise information for the objects. In addition, an administrator should also have
Read and Write rights to other eDirectory properties used by GroupWise. For example, Full Name is
an eDirectory User object property used by GroupWise. For a list of GroupWise objects, GroupWise
object properties, associated eDirectory object properties, see
Properties Rights," on page
For information about giving a user rights to modify an object's properties or restricting a user's
rights to modify an object's properties, see
Property Rights," on page
Modifying Link Information
By default, when an administrator creates a domain or post office, the links to other domains or post
offices are automatically created. Because there are many different ways you can configure your
domain and post office links, you can use the Link Configuration utility to modify how domains and
post offices are linked together. You can also use object and property rights to determine which
administrators have the ability to modify link information. The following rules apply to modifying
link information:
To modify the links for post offices within a domain, the administrator must have Read and
Write rights to the NGW: GroupWise ID property for the Domain object and the Post Office
objects. In addition, the administrator must have Write rights to the NGW: Link Configuration
property for the Domain object.
To modify the links between domains, the administrator must have Read and Write rights to the
NGW: GroupWise ID property for each Domain object, and Write rights to the NGW: Link
Configuration property for each Domain object.
Because correct domain and post office links are essential to the proper functioning of your
GroupWise system, you might want to assign link configuration tasks to a single administrator and
restrict other administrators' abilities to modify link information. Or, if you have a multiple-domain
system with multiple administrators, you could have one administrator responsible for all domain
links and the other administrators responsible for the post office links for their domains. For
information about giving a user rights to an object's properties (or restricting a user's rights to an
object's properties), see
page 1189.
1180 GroupWise 8 Administration Guide
1185.
Section 79.4, "Granting or Removing Object and
1189.
Section 79.4, "Granting or Removing Object and Property Rights," on
Section 79.3, "eDirectory Object and