Using the Security Section of the DAC

This chapter describes how to use the Director Administration Console (DAC) to control user access to ACL subsystem administrative functions.

For more information For information about how to access the DAC, see the section on accessing the DAC in Developing exteNd Director Applications.

Modifying administrative access

The Security section allows you to view the members of each pairing of a subsystem administrator type and a permission, as shown below:

Security

Procedure To assign users and groups:

Select an Admin type from the dropdown list:

For a description of the Admin types, see ACL subsystem administrators.
Select a Permission from the dropdown list.

The list of permissions depends on the Admin type you selected.

For a description of the permissions for each type, see ACL subsystem administrators.

After you select a permission, lists of users and groups for the selected ACL appear in the Users selected and Groups selected lists.
Select users or groups from the users available and groups available lists:
- To select multiple users or groups: click the first, then Ctrl-click each additional.
- To select a range of users or groups: click and drag from the first to the last.
Use the button to add items, and the button to remove items.
Click Save.

NOTE: If you need to remove an administrative user from the realm:
Make sure there will be at least one user remaining in each administrative group. Otherwise, anyone will be able to administer the subsystem.
Remove the user from all administrative groups and, if necessary, from all administrative ACLs.