Endpoint Administration Guide for UNIX › Managing Users and Groups › Where Information about Accessors Is Stored

Where Information about Accessors Is Stored

The information that CA ControlMinder uses about users and groups is stored both in the CA ControlMinder database and in the host operating system. The host operating system information stores are called enterprise user stores, or just enterprise stores. By default, CA ControlMinder is configured so that it does not use the enterprise stores. You can, however configure CA ControlMinder so that if it cannot find a user or group defined in its database, it looks for, and uses the information from, the users and the group memberships defined in the enterprise stores.

Note: CA ControlMinder uses information from the enterprise stores but only writes to them if you use selang command in the native environment.

When checking for authorization, CA ControlMinder always checks for accessors defined in its own database before it checks the enterprise store: if you have an enterprise user with the same name as a user defined in the CA ControlMinder database, the enterprise user is ignored by CA ControlMinder.