Netscape NETSCAPE CONSOLE 6.0 - MANAGING SERVERS, Manual

Page: 167 / 302

167
Chapter 9
Access Control
This chapter describes how you can use access control instructions to define who
can manage and use Netscape servers. It contains the following sections:
• Overview of Access Control
• Working With Access Control Instructions
Overview of Access Control
If a number of administrators in your enterprise use Netscape Console, you may
want to restrict what each of them can see and do. For example, you may want one
administrator to handle all server management tasks and another to manage users
and groups. You can specify these permissions through the use of
Access Control
Instructions (ACIs).
ACIs are rules that permit or restrict access to a server, onscreen element, task, or
directory entry. In a single ACI, you can specify access based on user name, IP
address, time of day, and a number of other criteria. You can also chain multiple
ACIs together in an
Access Control List (ACL) to perform complex authorization
procedures.
For users, access control is transparent. During login, Netscape Administration
Server authenticates a user against the Directory Server. The Directory Server
returns the user’s administrative privileges and applicable ACIs. The instance of
Administration Server evaluates this information and then instructs Netscape
Console to display only those resources and server tasks that the user is allowed to
access.
For detailed information about ACIs for a particular Netscape server, see the
documentation for that server.