About Administering NDS Rights

Each time a user attempts an action on an NDS* object or property, NDS calculates the user's effective rights to that object or property to see if the action is authorized. Effective rights are the sum of the user's rights plus any rights held by objects that the user is security equivalent to. These rights can be explicitly assigned on the current object or inherited from an assignment higher in the tree. Inherited rights can be blocked by a filter on the current object or property but explicit rights can't be blocked.

A user is automatically security equivalent to the Groups and Organizational Roles that he or she belongs to, and is implicitly security equivalent to the [Public] trustee and to each container above the user in the tree, including [Root]. In addition to these security equivalences, you can explicitly grant a user security equivalence to any object.

For descriptions of the individual NDS rights and how to create the objects and assignments that control their effect, click a related topic below. For more background information on how NDS rights work, click Web Links below.

• Rights to an NDS Entry (Object)
• Rights to an NDS Property
• To grant or deny explicit rights to an object or property
• To delete a trustee (explicit rights) assignment
• To block inherited rights to an object or property
• To view effective rights to an object or property
• To create an administrator over specific properties
• To create a Group object
• To add a user to a group
• To create an Organizational Role object
• To grant a user security equivalence to an object

Web Links

* Novell trademark. ** Third-party trademark. For more information, see Trademarks.