Novell EDIRECTORY 8.8 SP3, Руководство администратора, Страница: 69 / 634

Understanding Novell eDirectory 69
n
ov
do
cx (e
n)
11
Ju
ly 20
08
Granting Security Equivalence by Membership
1 If you haven't already done so, create the group or role object that you want the users to be
security equivalent to.
See
“Creating an Object” on page 96 for details.
2
Grant the group or role the eDirectory rights that you want the users to have.
See
“Assigning Rights Explicitly” on page 67 for details.
3
Edit the membership of the group or role to include those users who need the rights of the
group or role.
Š
For a Group object, use the Members property page.
In Novell iManager, click
eDirectory Administration > Modify Object , specify the name
and context of a Group object, click OK , then click the Members tab.
Š For an Organizational Role object, use the Role Occupant field on the Role Occupant
property page.
In Novell iManager, click
eDirectory Administration > Modify Object , specify the name
and context of an rbsRole object, click OK , then click Role Occupant on the General tab.
Š
For an rbsRole object, use the Modify iManager Members page.
In Novell iManager, click the
Configure button Description: Configure button , click
Role Configuration > Modify iManager Roles , click the Modify Members button
Description: Modify Members button to the left of the role you want to modify, then use
the options on the Modify iManager Members page to add or remove members from a
role.
4 Click OK .
Granting Security Equivalence Explicitly
1
In Novell iManager, click the Roles and Tasks button Description: Roles and Tasks button .
2 Click eDirectory Administration > Modify Object .
3
Enter the name and context of the user or object that you want the user to be security equivalent
to, then click
OK .
4 Click the Security tab, then grant the security equivalence as follows:
Š
If you chose a user, click Security Equal To > enter the name and context of the object that
you want the user to be security equivalent to, press Enter, then click OK .
Š If you chose an object that you want the user to be security equivalent to, click Security
Equal to Me , enter the name and context of the user that you want the object to be security
equivalent to, press Enter, then click OK .
The contents of these two property pages are synchronized by the system.
5 Click OK .
Setting Up an Administrator For an Object's Specific eDirectory Properties
1
If you haven’t already done so, create the User, Group, Role, or Container object that you want
to make a trustee of the object's specific properties.
If you create a container as a trustee, all objects inside and below the container will have the
rights you grant. You must make the property inheritable or the container and its members will
not have rights below its level.