
Chapter 4 Setting Up User Accounts 73
Assigning Administrator Rights for a Directory Domain
A user who has administrator privileges for an Apple directory domain can make
changes to user accounts, group accounts, and computer lists stored in that domain
using Workgroup Manager. The changes the user can make are limited to those you
specify.
You can use Workgroup Manager to assign directory domain administrator privileges
for an account stored in the LDAP directory of an Open Directory master or a NetInfo
domain. You can also use Workgroup Manager to review these privileges in any
directory domain accessible from the server you’re using.
To set directory domain administrator privileges in Workgroup Manager:
1 Make sure the user has an account in the directory domain.
2 In Workgroup Manager, click Accounts.
3 Select the user account.
To select the account, click the small globe above the accounts list and choose the
directory domain in which the user’s account resides, and select the account.
4 To be authenticated, click the lock.
5 In the Basic pane, select “User can administer this directory domain.”
6 To specify what the user should be able to administer in the domain, click Privileges.
By default, the user has no directory domain privileges.
7 Click the Users, Groups, or Computer Lists button and make the desired settings.
If you don’t select a checkbox (such as “The administrator can edit user preferences”),
the user can view the account or preference information in Workgroup Manager, but
not change it.
To add an item the “listed below” area (on the right), drag it from the Available list (on
the left). To remove an item, select it and press the Delete key on the keyboard.
GUIDs
Beginning with Mac OS X version 10.4, a universal ID called a globally unique identifier
(GUID, pronounced GOO-id) provides user and group identity for ACL permissions. The
GUID also associates a user with group and nested group memberships.
A discussion of GUIDs and their implications appears in Appendix B.
Komentarze do niniejszej Instrukcji