Configure the administration database acl – Google Apps Migration for Lotus Notes Installation & Administration Guide User Manual
Page 30

30
Google Apps Migration for Lotus Notes Installation & Administration Guide
When creating the database you need to select Show Advanced Templates when specifying
the template to use.
Create the administration from the template using the Notes menus. If you simply copy the
NTF file to an NSF file, the monitoring agents will not run, and the ACL will not be configured
correctly.
Configure the Administration Database ACL
Configure the Administration database ACL as described below.
Global Administrators
Global administrators are handled internally by the system setup profile. You do not need to
make any manual configuration of the ACL for global administrators.
Global administrators are granted manager rights, and assigned the [Admin] role.
Global administrators are responsible for configuring the Administration database and creating
site documents.
Site Administrators
Site administrators are handled internally by the site profile. You do not need to make any
manual configuration of the ACL for site administrators.
Site administrators are identified when you configure a new site document (General tab), and
are assigned the [SiteAdmin] role, and given Author access to the database.
Site administrators are responsible for maintaining site profiles and the related user profiles.
They can edit their profiles for their own sites, and view the profiles for all other sites. Site
administrators cannot create or delete site profiles.
-Default- entry
The -Default- entry in the Administration database is set to Manager when it is created. If you
are using the invitation system and your users are updating their own profiles in the
Administration database, then reduce this entry to Author and remove all role assignments.
These users do not need document create or delete rights.
If your users do not need to update their profiles, then you do not need to grant them any
rights. In this case, you should reduce the -Default- entry to No Access and remove all role
assignments.