Configuration Guides › Policy Configuration Guide › Administrative User Interface Management › SiteMinder Administrators › Administrator Use Case › ManagerAdmin Assigns Privileges to JuniorAdmin

ManagerAdmin Assigns Privileges to JuniorAdmin

The second part of this use case shows how privileges can be assigned from an Administrator with a specific set of privileges to another administrator.

ManagerAdmin creates a new manager named JuniorAdmin. When ManagerAdmin goes to select the Security Categories for JuniorAdmin, only the following two are available:

• Application Administration
• Policy Administration

ManagerAdmin can only assign those two categories to JuniorAdmin because ManagerAdmin only has the P (protect) permission for those two categories.

Important! The protect permission allows the one manager to assign the category to the another administrator.

ManagerAdmin proceeds to assign access methods and rights to JuniorAdmin as follows:

• Access Method

  GUI Allowed

• Rights
  • ManagerAdmin chooses the Application Administration category. ManagerAdmin has ALL for the Application Administration scope so when he chooses this category for JuniorAdmin he sees a list of all the applications available in the system. In this case, he assigns ALL as the scope for JuniorAdmin, but with only the permission to view the applications.
  • ManagerAdmin chooses the Policy Administration category. He only has a choice of Domain1 and Domain2 in the scope dialog. He chooses Domain1 for JuniorAdmin and gives JuniorAdmin only view and manage permissions.

    Note: When choosing categories, ManagerAdmin only had the Policy Administration category available because he previously assigned the Application Administration category, which is the only other available choice.

    If ManagerAdmin wants to assign Domain2 later on, this will be the only domain available in the scope list because Domain1 is already assigned.

JuniorAdmin's final rights are as follows:

* Permissions: View, Manage, Propagate, eXecute (only for executing reports)