Administrative Permissions

Displays the name of the Principal you are editing. You should add an additional principal account with the /admin instance for the individual requiring administrator privileges.

Select this box to allow this principal to add new principals to the principal database.

Select this box to allow this principal to delete principals from the principal database.

Select this box to allow the user to modify principals.

Select this box to allow the user to inquire about specific prinicpals. This option is required for any principal that is being granted access to this Administrator program. To enable a user to log on to the Administrator program, it is sufficient to select the option Inquire about Principals for the current realm only, the lower list, rather than all realms, the upper list

Select this box to allow the user to extract a key into the service key table file.

Select this box to allow the user to change principal passwords. This option allows the user to change or any principal in the principal database, including principals in admin_acl_file.

Select this box in combination with the Add Principals, Delete Principals, Change Principal Password, Inquire about Principals, Modify Principals or Extract Keys boxes in the administrative principal's realm or all realms to permit administrative principals to use these options only against certain prinicpal, as indicated below:

Administrative principals who have the Restricted Administrator modifiers are not restricted from managing principals that are not included in the admin_acl_file.

The Restricted Administrator modifier setting does not override the Modify Administrative Permissions setting; that is, an administrative principal with both the Modify Administrative Permissions and the Restricted Administrator settings enabled can change principal settings in the admin_acl_file, including their own.

The Restricted Administrator modifier setting also does not override the Edit Group Default setting; so an administrative principal with both these settings enabled can edit the values of the default group principal.

values stored in the default group for the realm. Edits to the default principal are made through the Group Information window.

are made on the Administrative Permissions window.

The Administrative Permissions window features two All buttons,

Click either button, respectively, to assign all administrative permissions for the principal in all realms or this realm only.