OSF DCE Administration Guide--Core Components

OSF DCE Administration Guide—Core Components
To change all management, authentication, and user information (except passwords) for
accounts, you must have the following permissions for the principal that is named in the
account:
• The ra permission to change authentication information
• The rm permission to change management information
• The ru permission to change user information
41.2.12 Permissions Required to Change Passwords for Accounts
Figure 41-15 shows the permissions that are required to change passwords for accounts.
Figure 41-15. Permissions Required to Change Passwords For Accounts
r permissionprincipal named in
the account
ru permission
Policy Object
To change passwords for accounts, you must have the following permissions for the
principal that is named in the account:
• The ru permissions on the account’s principal
• The r permission on the registry policy object
41.2.13 Permissions Required to Change Authentication and
Management Information for Registry Policies and Properties
Figure 41-16 shows the permissions that are required to change authentication and
management information for registry policies and properties.
Figure 41-16. Permissions Required to Change Authentication and Management Information
For Registry Policies and Properties
Policy Object
ra permission (authentication)
rm permission (management)
To change management or authentication information for the registry by using the dcecp
registry modify command or the rgy_edit prop, po, and auth commands, you must
have the ra permissions to change authentication information or the rm permissions to
change management information for the registry policy object.
41 − 14 Tandem Computers Incorporated 124243