Groups And Their Privileges; Group For Administrators - Netscape MANAGEMENT SYSTEM 6.0 Installation And Setup Manual

Groups and Their Privileges

Groups and Their Privileges
In Certificate Management System, a group refers to a collection of privileged
users—administrators, agents, or trusted Registration Managers. Each group has
predetermined privileges, based on its access control. All users belonging to a
group automatically inherit the privileges of that group.
When you installed Certificate Management System, it automatically created the
following groups for the subsystems you installed:
•

Group for Administrators

• Groups for Agents
• Group for Trusted Managers
These default groups are created in the internal database of the appropriate CMS
instance. They can help you set up your privileged users quickly and easily.
You can add new privileged users to these groups; see "Setting Up Privileged
Users" on page 388. You cannot delete or change the group names. Also, don't
change the internal database in which the groups are stored.
Group for Administrators
During installation, Certificate Management System automatically creates a group
called
this user to the certificate administrator ID (of the CMS administrator) you specified
during installation. If you don't remember this name, see the installation
worksheet you completed in preparation for installing the system (see
("Administrator" on page 191). For example, if you specified
for the CMS administrator, the name of the user in the
be
admin
Keep in mind that the
user entry. This means you can delete the entry that was created in this group
during installation, provided you add another user to the group.
After installation, be sure to do the following:
Log in to the CMS window with the administrator ID and password specified
1.
during installation.
384 Netscape Certificate Management System Installation and Setup Guide • March 2002
and adds a user to this group; the server sets the name of
Administrators
.
Administrators
Administrators
group must always contain at least one
as the user ID
admin
group will