Permissions Page

This page allows you to grant permissions to users and groups that are members of the Management & Control Services (MCS) directory service listing, for the following purposes:

• If you are accessing this page from within MCS, this page allows you to grant permissions for accessing and using the MCS console.

• If you are accessing this page from within an MCS-compatible product, this page allows you to grant permissions for various purposes, such as creating, storing, accessing, editing, or deleting host access configurations or presentations.

It can take up to 10 minutes for a new user account to become active if that account's permissions are assigned by way of a group, rather than directly to the user.

Directory: Displays a list of groups defined in the directory service that is being used by MCS for managing users.

The following accounts are always included in the Directory listing by default:

• <anonymous>—This account allows you to specify the permissions that are in effect when the MCS authentication type is set to None on the MCS Authentication page (meaning that no user name or password is required).

  For MCS console access, <anonymous> always has full permission when the authentication type is set to None (whether you assign it or not).

  For MCS-compatible products, the permissions you assign to <anonymous> determine the default permissions that are used when permissions are assigned for that product using the <anonymous> account.

• <Everyone>—This account allows you to easily assign default permissions to every member of the directory. If you select a different directory service type or specify a different directory server path, all but the <Everyone> permissions are cleared.

Show users: Click this button to display the individual users defined in the directory service. (Only groups are displayed by default, to reduce the display time when this page is initially accessed.)

Add: Select a user or group from the Directory list and then click this button to grant permissions for that user or group. When you click Add, the selected user or group appears in the Assigned list.

Remove: Select a user or group from the Assigned list and then click this button to disable permissions for that user or group. When you click Remove, the selected user or group is removed from the Assigned list.

Assigned: Displays a list of the users and groups that have been granted permissions for the associated function.

You can choose to cache directory service information to minimize display time using two options in the file mcs.properties: MCS.DirectoryServices.EnableCaching. If set to true, enables caching for all directory services. The value is false if not otherwise specified. MCS.DirectoryServices.CachedDirectoryLifetime. The length of time a cached directory is stored, in milliseconds. The value is 600,000 (10 minutes) if not otherwise specified. In addition, if you use NTDS as your directory service, you can change the interval at which directory information is refreshed. NTDSHlpRefreshMinutes. The length of time, in minutes, to wait before refreshing user, group, and domain information from the directory service. The value is 12 if not otherwise specified. Domain information is displayed on the Permissions page.

	Setting Console Access Permissions
	Configuring the Directory Service
	Overview of MCS Security