A security profile is an operating system user account or group in the domain manager (local profiles) or in its network domain (domain profile).
The security subsystem in Client Automation supports multiple security profiles. A security profile is either built-in (that is, created at installation time) or user-defined.
A user-defined security profile represents either a single user or a user group.
The most important security profiles created at installation time include:
In addition to the security profile there is a set of security classes, which is associated with a profile. Each profile has its own set of security classes. A security class allows setting the permissions that will be assigned to an instance of such a class as soon it is created.
You can also create security profiles for users in the trusted domains. Every user should have a valid security profile to log in to the system. If new users are added to a managed group, they automatically inherit the access rights given to the group and can log in to the system instantly.
A user can have multiple profiles. However, each profile can be mapped to only one user or group. For example, if a user is a member of a group, then that user can have two profiles: one mapped to the user account and the other mapped to the group. In this case, the user will have the (mathematical) union of permissions in both profiles.
If a user is a member of more than one security profile, the effective permission for that user is a (mathematical) union of the individual permissions defined for each security profile (like applying (mathematical) OR to all permissions).
If you want to deny access for a user of an individual security profile, you must remove that user from the security profile.
The system provides predefined security profiles and lets you create as many profiles as you want, using the Security Profiles dialog.
We recommend that at least one of these profiles has Full Control as access right to the system.
|
Copyright © 2014 CA Technologies.
All rights reserved.
|
|