Install Guide

NOTE: When adding Universal-type Product Groups from separate domains, create an Association object with Universal scope.
The default Association objects created by the Schema Extender utility are domain Local Groups and do not work with Universal-
type Product Groups from other domains.
1 In the Console Root (MMC) window, right-click a container.
2 Select New.
3 Select a RAC or Server Administrator object, depending on what you have installed.
The New Object window is displayed.
4 Type in a name for the new object. This name must match the Active Directory product name as discussed in Conguring Active
Directory Using CLI on Systems Running Server Administrator
.
5 Select the appropriate Product Object.
6 Click OK.
Creating A Privilege Object
Privilege Objects must be created in the same domain as the Association Object to which they are associated.
1 In the Console Root (MMC) window, right-click a container.
2 Select New.
3 Select a RAC or Server Administrator object, depending on what you have installed.
The New Object window is displayed.
4 Type in a name for the new object.
5 Select the appropriate Privilege Object.
6 Click OK.
7 Right-click the privilege object that you created and select Properties.
8 Click the appropriate Privileges tab and select the privileges that you want the user to have.
Creating An Association Object
The Association Object is derived from a Group and must contain a group Type. The Association Scope species the Security Group Type
for the Association Object. When you create an Association Object, choose the Association Scope that applies to the type of objects you
intend to add. Selecting Universal, for example, means that Association Objects are only available when the Active Directory Domain is
functioning in Native Mode.
1 In the Console Root (MMC) window, right-click a container.
2 Select New.
3 Select a RAC or Server Administrator object, depending on what you have installed.
The New Object window is displayed.
4 Type in a name for the new object.
5 Select Association Object.
6 Select the scope for the Association Object.
7 Click OK.
Adding Objects To An Association Object
By using the Association Object Properties window, you can associate users or user groups, privilege objects, systems, RAC devices, and
system or device groups.
NOTE
: RAC users must use Universal Groups to span domains with their users or RAC objects.
Using Microsoft Active Directory 45