Rights Required For Subcontainer Administrators - Novell OPEN ENTERPRISE SERVER 2 SP2 Installation Manual

This section outlines the eDirectory rights required and explains how a subcontainer administrator
approaches various installation tasks.
Section 2.5.1, "Rights Required for Subcontainer Administrators," on page 19
Section 2.5.2, "Starting a New Installation as a Subcontainer Administrator," on page 21
Section 2.5.3, "Adding/Configuring OES Services as a Different Administrator," on page 21

2.5.1 Rights Required for Subcontainer Administrators

For security reasons, you might want to create one or more subcontainer administrators
(administrators that are in a container that is subordinate to the container that user Admin is in) with
sufficient rights to install additional OES servers, without granting them full rights to the entire tree.
A subcontainer administrator needs the rights listed in
tree.
These rights are typically granted by placing all administrative users in a Group or Role in
eDirectory, and then assigning the rights to the Group or Role. Sample steps for assigning the rights
to a single subcontainer administrator are provided as a general guide.
Subcontainer Administrator Rights Needed to Install
Table 2-2
Rights Needed
Supervisor right to itself
Supervisor right to the
container where the server
will be installed
Supervisor right to the W0
object located inside the
KAP object in the Security
container
Sample Steps to Follow
1. In iManager > View Objects > the Browse tab, browse to and select
the sub-container administrator.
2. Click the administrator object, then select Modify Trustees.
3. Click the Assigned Rights link for the administrator object.
4. For the [All Attributes Rights] property, select Supervisor, then click
Done > OK.
1. Browse to the container where the subcontainer administrator will
install the server.
2. Click the container object and select Modify Trustees.
3. Click Add Trustee, browse to and select the subcontainer
administrator, then click OK.
4. Click the Assigned Rights link for the administrator object.
5. For the [All Attributes Rights] and [Entry rights] properties, select
Supervisor, then click Done > OK > OK.
1. Browse to Security > KAP.
2. In KAP, click W0 and select Modify Trustees.
3. Click Add Trustee, browse to and select the subcontainer
administrator, then click OK.
4. Click the Assigned Rights link for the administrator object.
5. For the [All Attributes Rights] and [Entry rights] properties, select
Supervisor, then click Done > OK > OK.
Table 2-2 to install an OES server into the
Preparing to Install OES 2 SP2 19