Novell EDIRECTORY 8.8 - GUIDE, Manual

Page: 21 / 574

Understanding Novell eDirectory 21
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
The Tree object is the top container object in the tree. It usually contains your company’s
Organization object.
Organization is normally the first container class under the Tree object. The Organization object
is typically named after your company. Small companies keep management simple by having all
other objects directly under the Organization object.
Organizational Unit objects can be created under the Organization to represent distinct
geographical regions, network campuses, or individual departments. You can also create
Organizational Units under other Organizational Units to further subdivide the tree.
Other classes of container objects are Country and Locality, which are typically used only in
multinational networks.
The Domain object can be created under the Tree object or under Organization, Organizational
Unit, Country, and Locality objects.
You can perform one task on the container object that applies to all objects within the container.
Suppose you want to give a user named Amy complete management control over all objects in the
Accounting container. (See
Figure 1-3 .)
Figure 1-3
Container Object
To do this, right-click the Accounting object, select Trustees of This Object , then add Amy as a
trustee. Next, select the rights you want Amy to have, then click OK . Now Amy has rights to
manage the Database application, the Bookkeepers group, the LaserPrinter printer, and the users
Amy, Bill, and Bob.
Inheritance
Another powerful feature of eDirectory is rights inheritance. Inheritance means that rights flow
down to all containers in the tree. This allows you to grant rights with very few rights assignments.
For example, suppose you want to grant management rights to the objects shown in
Figure 1-4 on
page 21 .
Figure 1-4
Sample eDirectory Objects