OSF DCE Administration Guide--Core Components

OSF DCE Administration Guide—Core Components
permissions:
• The maug permissions on the account’s principal
• The tM permissions on the group that is named in the account
• The r permission on the organization that is named in the account
• The r permission on the registry policy object
41.2.4.4 Adding an Account and the Principal to the Organization Only
Figure 41-7 shows the permissions that are required to add an account and the principal
to the organization only.
Figure 41-7. Permissions to Add an Account and the Principal to the Organization
Only
organization
named in the
account
principal named
in the account
mau permission
rtM permission
group named in
the account
Policy Object
any permission
r permission
To add an account and add the account’s principal to the organization (the principal is
already a member of the group named in the account), you must have the following
permissions:
• The mau permissions on the account’s principal
• At least one permission of any type on the group that is named in the account
• The rtM permissions on the organization that is named in the account
• The r permission on the registry policy object
41.2.5 Permissions Required to Delete Accounts
Figure 41-8 shows the permissions that are required to delete accounts.
Figure 41-8. Permissions Required to Delete Accounts
41 − 10 Tandem Computers Incorporated 124243