Is there a way to grant administrative rights to only a portion of a tree?
Articles and Tips: qna
01 Oct 1998
Q.
Dear Ab-end: In NetWare 4, is there a way to grant administrative rights to only a portion of a tree while not allowing the subtree administrator to perform partitioning operations?
—Selfish Administrator
A.
Dear Selfish: The following procedure you will allow you to create a "container" admin that can service users and manage objects, but not perform partitioning operations.
In NWAdmin, navigate to the container, or create a new one.
Make the container a partition root.
Create an administrator user object in that container. Then grant the following rights to that administrator: —All entry rights except for Supervisor —All attribute rights —Read and Compare rights(only) on the container's ACL
Verify that the user has no Write rights on any container ACL in the tree, especially those higher in the tree up to and including the ROOT. This will restrict the administrator from performing partition operations in the tree.
* Originally published in Novell AppNotes
Disclaimer
The origin of this information may be internal or external to Novell. While Novell makes all reasonable efforts to verify this information, Novell does not make explicit or implied claims to its validity.