Previous Topic: Add UsersNext Topic: Setting Console Manager Characteristics


Granting Privileges

The root or system account has all the Console Manager privileges by default. You cannot change this information as there is no entry in the configuration database for this account. If you do create an entry for user root or system, Console Manager will ignore it, and use the default.

Unless a user has an entry in the configuration database, they are not allowed to perform any of the Console Manager functions.

Note: It is important to realize that granting a user privileges to edit the configuration database allows that user to set all other privileges for both themselves and any other user.

Note the following rules regarding usernames:

The username is automatically uppercased by the user interfaces in order to check for a match against the user authorization file entry.

Add Security Profiles

You will need to create security profiles if any of the following apply to your configuration:

To define a security profile

  1. Start the configuration editor.
  2. Pull down the Edit menu and choose the Security Profile submenu.

    This displays the Security Profile dialog box. You must enter the security profile name here. For example, JSMITHsecure.

  3. Click the space provided for the name of the security profile and enter the security profile name.
  4. Click OK. This displays the Security Profile dialog box, as shown in the following figure.

    Snap2

Item

Description

Name

A unique name for the security profile

Information

Description to clarify name

User

User account name

Password

Password for user account (stored encrypted, displays as all *'s).
Required for password-based authentication; Ignored for publickey authentication

Pass-phrase

Passphrase for the certificate (stored encrypted, displays as all *'s).
Required if you have protected your private key(s) with a passphrase

Key/Identity file

Optional.
The logical name that equates to the file specification of the key/identity file. If you not specify a logical name, the default file specification of SYS$SYSROOT:[SYSMGR.SSH2]IDENTIFICATION. Will be used.
For more information about this logical name see the chapter "Set up the Environment".