Authorizations › Sample Authorizations › Authorization for SFS Managers

Authorization for SFS Managers

SFS manager authorization can be a complicated authorization to give because you may want to give different authority to different SFS managers.

In addition to the authorization they already have as directory managers, we recommend that you also give the SFS managers authority to use the DELETE, ENROLL, MODIFY, and MOVE2SFS CA VM:Secure SFS commands on only the user IDs they manage.

If you want SFS managers to perform SFS user administration functions using the Manager Selection Menu, you must additionally grant those SFS managers MANAGE, MANAGE 10, or MANSEL10 authorization.

Note: For more information and instructions about designating user IDs as SFS administrators and SFS managers, see Configuring CA VM:Secure for SFS.