Privileged-User Types And Responsibilities; Administrators - Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual

Privileged-User Types and Responsibilities

Privileged-User Types and Responsibilities
After you install Certificate Management System, your first task is to set up
privileged users. There are three types of privileged users: administrators, agents,
and trusted managers.
• Administrators are users (people) who manage server-specific tasks for the CMS
maangers, the Certificate Manager, Registration Manager, Data Recovery
Manager, and Online Certificate Status Manager. For details, see
"Administrators" on page 372.
• Agents are users (people) who manage the request queues for the CMS
managers. For details, see "Agents" on page 373.
• Trusted managers are CMS subsystems that are connected to other subsystems
and that are trusted to perform certain activities for them. For example, you
might set up a Registration Manager to screen end-entity certificate requests
for a Certificate Manager. Because the Certificate Manager trusts the
Registration Manager, it approves all certificate requests received from this
Registration Manager. For details, see "Trusted Managers" on page 380.
The role of a privileged user—whether administrator, agent, or trusted
manager—is determined by the group to which the user belongs. This is explained
in "Groups and Their Privileges" on page 384.

Administrators

Administrators are users who have been assigned CMS administration
privileges—permission to access the CMS window and perform all the system
administration tasks defined there. You assign these privileges to users by adding
them to the internal database and assigning membership in a group called
Administrators
For each CMS instance, the server must have at least one administrator. You can
also have more than one individual administering the server.
During installation, Certificate Management System prompts you to provide
information for creating the first user entry in the
Following installation, therefore, this group has a single user entry. For more
information about this group, see "Group for Administrators" on page 384.
Certificate Management System authenticates users with administrator-level
privileges based on its built-in authentication mechanism. This is explained in
"Authentication of Administrators" on page 490.
372 Netscape Certificate Management System Installation and Setup Guide • March 2002
that Certificate Management System creates during installation.
group.
Administrators