Modify Trustees

When the default rights assignments in your eDirectory tree provide users with either too much or too little access to resources, you can create or modify explicit rights assignments. To do this, start by selecting either the resource that you are controlling access to, or the trustee (the eDirectory object that possesses, or will possess, the rights).

To add a trustee:

1. Click Add Trustee.
2. Select the object, then click OK.
3. Click Assigned Rights to assign the trustee rights.
   When creating or modifying a rights assignment, you can grant or deny access to the object as a whole, to all the properties of the object, and to individual properties.
4. Click Done.

To delete a trustee:

When you delete a trustee, that trustee no longer has explicit rights to the object or its properties but might still have effective rights through inheritance or security equivalence.

1. Select the trustee, then click Delete Trustee.
2. Click Done.

To modify a trustee:

To manage users' rights collectively rather than individually, consider making a group, role, or container object the trustee.

1. Select the trustee, click Assigned Rights, then modify the rights assignment as needed.
2. Click Done.

For information about NetIQ trademarks, see http://www.netiq.com/company/legal/.