K.1 eDirectory Administrative Users and Groups

Every OES network requires at least one administrative-level user to manage regular network users and system users.

Table K-1 Administrative Users and Groups

Administrative User or Group	Associated Service	Object Type	Purpose
Admin	eDirectory	Admin User	The eDirectory administrator that has all rights to manage the Tree. The default is Admin.
Container Admin	eDirectory	Admin User	These administrators are usually responsible for administering within a partition or subtree. They might be assigned only enough rights to install servers, or they might be assigned to specific roles in iManager.
admingroup	eDirectory	Admin Group	Provides LUM-enabling for the eDirectory administrator.

Administrative User or Group

Associated Service

Object Type

Purpose

Admin

eDirectory

Admin User

The eDirectory administrator that has all rights to manage the Tree. The default is Admin.

Container Admin

eDirectory

Admin User

These administrators are usually responsible for administering within a partition or subtree.

They might be assigned only enough rights to install servers, or they might be assigned to specific roles in iManager.

admingroup

eDirectory

Admin Group

Provides LUM-enabling for the eDirectory administrator.

HINT:The iManager Role-based-services (RBS) feature lets you delegate administrative responsibilities based on administrative roles. For more information, see Role-Based Services in the NetIQ iManager Administration Guide.