A couple of Object Class rights are depending on each other; this means if you want to perform the following actions, you have to grant rights to more than one object class.
If you want to schedule a Report template, you need to grant Change right for object class "Report Scheduling" and Change right for object class "Engine".
The security class "Security Profiles" controls the handling with just security profiles (delete, and so on). If you want to modify object class permissions in a security profile, you must have Special Access (VRP, with the 'P' permission) for the object class "Class Permissions".
If you want to link an engine task to an engine, you must grant Change right for the "Engine" object class and Manage right for the "Engine Task" object class.
Regarding engine security, if you want to start, stop, or modify engine objects, you must grant Full Control right for the "Engine" class in the security profile and beyond NT Administrator or root rights to the computer where the engine is running.
If you want to modify or remove a software job under the /computer folder, the software is delivered to /Jobs/Software Jobs; the object classes "Computer" and "Software Job" must have Change rights.
If you want to start, stop, or modify Procedure objects, you must grant Change (VRWXD) for the "Procedure" class and beyond the file permissions administrator or root.
If you want to enable or disable the Security Area support and define Default Security Areas, the class permissions for the object class "Security Area" must be set at least to Special Access (VP).
If you want to link security profiles to a security area, View (V) permissions are sufficient for the object class "Security Area". The class permissions for the object classes "Security Profiles" must be set at least to Special Access (VW).
|
Copyright © 2013 CA.
All rights reserved.
|
|