Directory Managers › Changing Directory Manager Authorizations

Previous Topic: Example

Next Topic: Removing a Directory Manager

Changing Directory Manager Authorizations

You can change the scope of authority, such as which skeleton files a directory manager can use or how much space a directory manager can allocate, at any time. These changes are effective the next time the manager creates a user ID or changes any aspect of the user configuration that the VMSECURE MANAGERS file controls; however, they have no effect on user IDs the directory manager has already created or is currently managing.

Before you change a directory manager’s scope of authority, you may want to check the status of the user IDs that directory manager manages. For instance, before you reduce the amount of space that a directory manager can allocate, verify that directory manager actually has some unused space that you can take back.

Most of the information you will want to review about a directory manager is available through the QUERY command. For example:

Directory manager’s specification

Command that lets you review this specification

Current space allocations and space left to allocate

QUERY ALLOC MANAGER mgrid

Current space allocations and space left to allocate for all directory managers

QUERY MANAGERS

Skeleton files available for creating user IDs

QUERY SKELETON MANAGER mgrid

Subpools available for creating user IDs

QUERY SUBPOOLS MANAGER mgrid

Note: For more information about these commands or about other information you can find for directory managers, see QUERY Command in the chapter "Command Reference" in the Reference Guide.

To change a directory manager’s scope of authority

  1. Enter the following: 
    vmsecure admin managers
  2. Find the MANAGER record for the manager you want to change. The other records for this manager must be immediately following.
  3. Change any setting on any of these records, except for the name of the directory manager’s user ID.
  4. Save this XEDIT session and exit the VMSECURE MANAGERS file.