Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE STRUCTURE, System Administration Manual

Page: 31 / 374

Administrators 31
n
ov
do
cx (e
n)
16
Ap
ril 20
10
2.2.3 Modifying Assigned Rights
1
In ZENworks Control Center, click the Configuration tab.
2 Click the administrator in the Name column of the Administrators panel.
3
In the Assigned Rights panel, select the check box next to the assigned right.
4 Click Edit , then modify the settings.
For more information, see Section 2.3, “Rights Descriptions,” on page 31 .
5 Click OK .
2.2.4 Removing Assigned Rights
1 In ZENworks Control Center, click the Configuration tab.
2 Click the administrator in the Name column of the Administrators pane.
3 Select the check box next to the assigned right.
4
Click Delete .
You can also use the
admin-rights-delete
command in zman to delete assigned rights for an
administrator account. For more information, see “ Administrator Commands ” in the ZENworks 10
Configuration Management Command Line Utilities Reference .
2.3 Rights Descriptions
When you create additional administrator accounts you can provide full access to your zone or you
can create accounts with limited rights. For example, you could create an administrator account that
enables the administrator to assign bundles to devices but doesn’t allow the administrator to create
bundles. Or you could create an administrator account that allows access to all management tasks
except those pertaining to Management Zone configuration (user sources, registration, configuration
settings, and so forth). For information about creating additional administrators, see
“Creating
Administrators” on page 28 .
For Administrator roles only, a third column of rights options is added to each rights assignment
dialog box: Unset , which allows rights set elsewhere in ZENworks to be used for the role.
The most restrictive right set in ZENworks prevails. Therefore, if you select the Deny option, the
right is denied for any administrator assigned to that role, even if the administrator is granted that
right elsewhere in ZENworks.
If you select the Allow option and the right has not been denied elsewhere in ZENworks, the
administrator has that right for the role.
If you select the Unset option, the administrator is not granted the right for the role unless it is
granted elsewhere in ZENworks.
You can also add, modify, or remove the assigned rights for an existing administrator. For more
information, see
Section 2.2.2, “Assigning Additional Rights,” on page 30 , Section 2.2.3,
“Modifying Assigned Rights,” on page 31 , or Section 2.2.4, “Removing Assigned Rights,” on
page 31 .
The following sections contain additional information about the various rights that you can assign:
Š Section 2.3.1, “Administrator Rights,” on page 32