Endpoint Administration Guide for UNIX › Scope of Administration Authority › Global Authorization Attributes › PWMANAGER Attribute

PWMANAGER Attribute

The PWMANAGER attribute gives a regular user the authority to use the chusr or sepass command to change the passwords of other users.

Note: To let the PWMANAGER change the ADMIN user's password, set the cng_adminpwd option of the setoptions command. For more information, see the selang Reference Guide.

The PWMANAGER attribute does not include authority to change the number of grace logins, the password interval of another user, or general password rules.

The PWMANAGER's authority also includes use of the showusr and find commands.

Note: If a user has the nochngpass property set to yes, a PWMANAGER cannot change the password for that user.