Juniper NETWORK AND SECURITY MANAGER 2010.3, Руководство администратора

Страница: 117 / 1016

•
Subdomains—Create subdomains to segregate networks.
• Current Domain Detail—View the information about the current domain, such as
assigned administrators, authentication method, and default authentication servers.
The following sections explain how to configure these RBA settings.
Creating Administrators
The super administrator automatically has full permissions for all subdomains, so you
do not need to assign new subdomains to the super administrator. However, to assign a
subdomain to another administrator, you must first create the administrator and specify
their permissions within a selected subdomain.
You can create NSM administrators at the global domain or subdomain level:
•
To assign the new administrator permissions in the global domain or multiple
subdomains, create the administrator in the global domain.
• To assign the new administrator permissions in only one subdomain, create the
administrator in that subdomain.
Configuring General Settings
To create an NSM administrator account, click the Add icon in the Administrator tab to
display the New Admin dialog box. In the General tab, enter a name and contact
information (e-mail, telephone, and other basic information) for the new administrator.
NOTE: The following characters are not supported for NSM administrator names:
• Period ( . )
•
Number sign ( # )
•
Dollar sign ( $ )
• Asterisk ( * )
• Ampersand ( & )
•
Circumflex ( ^ )
Configuring Authorization
To configure the authorization method for the new administrator, click the Authorization
tab and select local or remote authentication:
• For locally authenticated administrators, the NSM management server handles
authentication. You must specify the password that NSM uses to authenticate the
administrator; the administrator must enter this password at the NSM UI login screen.
NOTE: All NSM passwords are case-sensitive.
67 Copyright © 2010, Juniper Networks, Inc.
Chapter 3: Configuring Role-Based Administration