To access the system using the System Administration Tool, a user must be assigned a user profile with administrator access rights. Access rights are assigned to user profiles through the User Authorization Profiles form.
The access rights granted to administrators are further controlled by the System Administrator Policy assigned to the administrator's user profile. The policy defines which forms in the System Administration Tool the administrator can view and edit. There are three default administrator polices: ROOT, SYSTEM, and REMOTE.
Notes:
For Release 6.x and 7.x systems the "System" profile has SDS Admin rights by default. If you upgrade to Release 8.0, the "SDS" profile is automatically assigned Root Administrator access rights.
On a system where the SDS feature is disabled, the SDS Shared Data Updates, SDS Form Comparison, and SDS Form Sharing forms do not appear in the list of forms that the System Administrator can access.
You can prevent a Root Administrator on a local system from having Root Administrator access rights on specific remote systems. Use the SDS Form Sharing form to restrict the sharing of the Root Administrator's profile with the remote systems. See Specifying the Shared Data for instructions.
An administrator who is assigned ROOT policy access rights can
view and edit (including Import and Export) all forms in the System Administration Tool;
manage all user profiles;
grant Root Administrator rights to other users;
perform all SDS-related activities.
An administrator who is assigned the default SYSTEM policy access rights can
view and edit all forms in the System Administration Tool except the SDS Form Sharing form.
manage user profiles that do not have System Administrator Tool access rights;
enable or disable the SDS feature in the System Options form;
synchronize data across the network or cluster elements (by clicking the Start Sharing and Sync buttons in the Network Elements form);
modify a network element's data through the System Administration Tool, Group Administration Tool, or Desktop Tool and have their database changes distributed by SDS to other elements (if SDS is configured to distribute the modified data).
An administrator who is assigned the default REMOTE access rights has all the rights of the System Admin except rights to access the IP networking forms (see System Administrator Policy for a list of the forms). Also, any new non-default policy created inherits the access rights of the SYSTEM policy with respect to SDS.
To assign administrator access rights to a user
Log on to the System Administration Tool using an account that has Root Administrator access rights.
Access the User Authorization Profiles form.
Select the user profile and click Change.
Under Access, check the System Admin box.
Select the required policy from the System Administrator Policy list.
Click Save.
CAUTION: To prevent unauthorized access, change the default administrator passwords.
CAUTION: Because of the nature of SDS, an administrator can indirectly modify data in a remote 3300 ICP without having administration rights programmed on that system.
