File System Rights; Edirectory Rights - Novell GROUPWISE 7 - SECURITY ADMINISTRATION Manual

The following two sections,
"eDirectory Rights," on page
eDirectory object and property rights needed to perform GroupWise administration tasks.
The final section,
lists some common types of GroupWise administrators (for example, Domain administrator and
Post Office administrator) and the specific file system and eDirectory rights they need.

75.2.1 File System Rights

A GroupWise administrator must have an account (or security equivalence) that provides the
following rights to the directories listed below:
Table 75-1
Directory
sys:\public (for ConsoleOne and GroupWise
Administrator snap-ins)
Any GroupWise system directory the administrator is
responsible for. This includes:
Any directory in which the GroupWise agents are
installed.
For NetWare, the default directory is sys:\system.
For Windows, the default directory is c:\grpwise
(for the MTA, POA, and Internet Agent) and
c:\webacc (for the WebAccess Agent).

75.2.2 eDirectory Rights

The eDirectory object and property rights an administrator requires depend on the administrative
tasks he or she needs to perform. In GroupWise administration, there are five basic tasks an
administrator can perform:
1136 GroupWise 7 Administration Guide
If you have one administrator whom you want to control all links between domains, you can
assign rights to the eDirectory objects and file systems associated with domains links.
Section 75.2.1, "File System Rights," on page 1136
1136, provide general information about the file system rights and
Section 75.2.3, "Common Types of GroupWise Administrators," on page
GroupWise Administrator Rights
domain directories
post office directories
software distribution directories
library storage area directories
Create and delete objects
resources, external entities, and distribution lists).
Modify object properties
another or deleting a GroupWise user from a distribution list).
NetWare Rights
Read
File
Scan
Read
Write
Create
Erase
Modify
File Scan
Access Control
Read
Write
Create
Erase
Modify
File Scan
Access Control
(for example, domains, post offices, gateways, agents, libraries,
(for example, moving a GroupWise user from one post office to
and Section 75.2.2,
1140,
Windows Permissions
Not applicable
Full Control
Full Control