3.7 Action Object Security

The NSM Engine processes the directives in Action Objects by using the Novell Storage Manager proxy account that performs file system and directory service operations for Novell Storage Manager. The account was created during installation and configuration of Novell Storage Manager 3.0.1 for eDirectory.

In order to restrict who can create valid Action Objects, Novell Storage Manager 3.0.1 for eDirectory requires that a container in eDirectory be specified for Action Object processing. The designated Action Object container and its subcontainers are the only containers in eDirectory from which the NSM Engine processes Action Objects. The Action Object Container can be secured by using regular access controls for eDirectory, limiting who is allowed to create and modify Action Objects.