User Management Resource Administrator supports Windows 2003/2000/NT
permissions for all objects with security settings. For files and directories
you can setup the specfic security settings that must apply. User Management
Resource Administrator uses similar windows as the Windows 2003/2000 graphical
user interface to facilitate the configuration of the permission settings.
In User Management Resource Administrator, the security settings can
contain variables. At
runtime, these variables are replaced by their actual values to calculate
and set the effective permissions. The security settings are primarily
used for directories created with script
actionCreate
directory. To setup the security settings, select the action Create directory
in the script section (lower left) of the project window. The properties of the script action are presented in the
properties section (lower right) of the project window. Double click property
Security
or select the property and select menu option Actions,
Properties of action property.
Select option Use the following
value and press the Edit
button. The Directory security
properties window is presented.
The window contains two
lists containing names of accounts (upper list) and permission settings
(lower list). The upper list shows the accounts for which permissions
are defined for the target object (e.g. the directory). These accounts
can be specified using existing account names or names containing a variable
(As opposed to the equivalent Windows 2003/2000/NT window). By using variables,
you can setup security settings for User Management Resource Administrator
scripts, e.g. permissions for user accounts that do not already exist
buit are specified only by a variable name. To add new accounts, press
Add. See
Directory
security - Adding accounts and permissions for more information.
In the lower section of the window, you can setup the basic
permissions for the account selected in the upper list. For the permission
values shown, simply check the Allow or Deny option to configure the permission setting.
In this permission list, you can setup only basic permissions.
For most purposes, this will be sufficient. To setup more advanced permission
settings, press Advanced.
In Windows 2003/2000/NT, you can setup permissions that
are inherited (copied) from the parent object. For directories, the parent
object is the directory of which the target directory is a subdirectory.
You can specify if inheritable permissions (as specified for the parent
object), should be inherited by the target object. Use the option Allow inheritable permissions from parent to
propagate to this object. If
you do not select this option, the permissions of the target object are
called protected
since inheritable permissions from the parent object will not be copied
to the target object.
