Apple Mac OS X Server (version 10.2.3 or later) - Manual (Page 142)

142 Chapter 3
Defining Passwords
See “Understanding Password Validation” on page 193 for details about setting up and
managing passwords.
Assigning Administrator Rights for a Server
A user who has server administration privileges can control most of the server’s
configuration settings and use applications, such as Server Status, that require a user to be a
member of the server’s admin group.
You can use Workgroup Manager to assign server administrator privileges to an account
stored in a NetInfo or LDAPv3 directory domain or to review the server administrator
privileges in any directory domain accessible from the server you are using.
To work with server administrator privileges in Workgroup Manager:
1 Log in to Workgroup Manager by specifying the name or IP address of the server for which
you want to grant administrator privileges.
2 Click the Accounts button.
3 Use the At pop-up menu to open the directory domain in which the user’s account resides.
4 To change the privileges, click the lock to be authenticated.
5 In the Basic tab, select the “User can administer the server” option to grant server
administrator privileges.
Assigning Administrator Rights for a Directory Domain
A user who has administration privileges for an Apple directory domain is able to make
changes to user, group, and computer accounts stored in that domain using Workgroup
Manager. The changes the user can make are limited to those you specify.
You can use Workgroup Manager to assign directory domain administrator privileges for an
account stored in a NetInfo or LDAPv3 directory domain or to review these privileges in any
directory domain accessible from the server you are using.
To work with directory domain administrator privileges in Workgroup Manager:
1 Make sure the user has an account in the directory domain.
2 In Workgroup Manager, click the Accounts button.
3 Use the At pop-up menu to open the directory domain in which the user’s account resides.
4 To edit privileges, click the lock to be authenticated.
5 In the Basic tab, select the “User can administer this directory domain” option to grant
privileges.
LL0395.Book Page 142 Wednesday, November 20, 2002 11:44 AM