Previous Topic: Setting Up Role-based Administration

Next Topic: Understanding Synchronization

Understanding Account Templates

An account template is used to control the capabilities and attributes of an account on any endpoint. The CA Top Secret policy contains over 150 attributes that you can set. These attributes control everything from what department a user is in, the capabilities the user has when logged on to TSO, and the user's CA Top Secret profiles. Basically, most attributes that you can define for an ACID can be established through an account template.

Account Templates are used to define the attributes to use when creating new accounts and also to ensure that existing accounts conform to established account templates. This is accomplished when you synchronize an account template to the accounts assigned to the account template. Since this concept is vital when implementing security, it is important to fully understand how this functionality works.