Assigning Rights to use Administration Features

You can limit rights to access and configure particular administration features to specific users and groups from your directory service or to virtual groups that you create.

The MCS System Administrators virtual group is created when you install MCS. If you upgrade from a version earlier than MCS version 2.2, this group automatically includes all users who had been given access to the MCS console in the previous version. All users in the MCS System Administrators virtual group have rights to all use services within the MCS console. For more information about virtual groups, see Adding a User or Group to the Directory Service.

In addition, two user accounts are included by default:

Anonymous — Use this account to specify the rights for users who log in without a user name and password when authentication is set to a value other than None.
The rights you assign to Anonymous also determine the default rights that are used when rights are assigned for an MCS-managed product using the Anonymous account.
Everyone — Use this account to assign default permissions to every member of the directory. If you change the directory service type or specify a different directory server path, all rights but those for the Everyone account are cleared.

To give users and groups permission to access MCS

In the MCS left pane, point to Services and then click Security.
Under Security, click Rights Management.

In the Rights Management page under Right To, select a feature.

Users and groups to whom the selected right has already been assigned are displayed under Assigned Users/Groups.

You can choose Properties to display a more detailed description of each right. The Properties dialog box also displays dependencies between granting rights to the selected feature and rights to other product features.

If you assign rights to a subordinate feature (one that depends on also having rights to another feature), rights to the other feature are automatically granted. However, if you remove rights to a subordinate feature, rights to the higher level feature are not automatically removed.

To assign rights to use the feature to a new user or group, click Add.
In the Add Users/Groups dialog box, either select one or more users and groups and click Add, or type a user or group name directly under Assigned Users and Groups.
If you click Check Names, MCS verifies that the names you add under Assigned Users and Groups are valid names from your directory service.
For details on any of the options on these pages, click Help.


	Setting Up Centralized Management, Overview
	Adding a User or Group to the Directory Service
	Accessing the MCS Console
	Authenticating MCS Users