Previous Topic: Add an Implicitly Trusted DomainNext Topic: Modify Security Profiles


Add Security Profiles Dialog

The Add Security Profiles dialog lets you add any number of users and groups to the security system at one time. For each user you add, a unique profile is created. This dialog displays a list of available security authorities: Windows NT domains, UNIX authentication targets, external directories such as NDS and LDAP, and the X.509 certificate subsystem.

This list of available security authorities is stored in the DSM manager. When running in a Windows NT domain environment, the DSM manager node automatically calculates all explicit domain trusts available and also lets you add an implicitly trusted domain. All these domains are displayed in the list of available security authorities in the Add Security Profiles dialog.

This dialog contains the following fields:

Select a security authority and browse for principals

Displays the security authorities in a tree structure. All the users, groups, and computers in each security authority are grouped under the respective folders. Expand a security authority and select a user, group, or computer (security principal).

Important! When creating certificate profiles for the purpose of replacing an existing predefined certificate, you must grant the same level of access as the certificate being replaced. Otherwise, system components may not work properly.

Add

Opens the Add Implicitly Trusted Authority dialog that lets you add an implicitly trusted domain to the Available Directories list. The Add button gets enabled only if you have selected Available Directories.

Remove

Removes the selected domain from the Available Directories list.

Container identifier

Displays the selected security authority.

Names

Displays the name of the security principal that you selected in the Available Directories tree. If a security authority has a huge number of users and groups, it takes a long time to browse for the principals. In this case, you can select the security authority in the tree and enter the security principal name in this field. When you enter multiple principals, separate each by a semicolon.

Add to list

Checks for the existence of the security principals given in the Names field and adds only those security principals that are available in the selected security authority.

Note: Clicking this button does not create a security profile. It only adds the security principals to the list.

List of security principals

Lists the security principals that are added to the list.

Remove from list

Removes the selected security principal from the list.

OK

Creates a security profile for each security principal in the list and opens the Class Permissions dialog.

Note: If you have added more than one security principal, the Class Permissions dialog is not displayed. You must select the profile in the Security Profiles dialog, and click Class Permissions.