Safeguard Administrator's Manual (G06.24+, H06.03+)

Controlling User Access
Safeguard Administrator’s Manual—523317-013
2-5
Adding Users to the System
An administrative group is defined implicitly when the first member of that group is
added to the system. By default, only the local super ID can define a new
administrative group with the ADD USER command. If your installation has group
managers (with member number 255), you might want to add that user as the first
group member. The group manager can then add other new members to the group.
(Alternatively, you can use the OBJECTTYPE USER command to define a special set
of users who have the authority to add other users to the Safeguard database. For
more information, see Section 5, OBJECTTYPE Control.)
To create a new administrative group, the local super ID assigns a unique group name
to a previously unused group number. From that point on, the association between the
group number and the group name is fixed. Any other users added to the group must
be assigned the group name defined for that group number. Examples in this section
show how to define administrative groups.
It is also possible to explicitly create a group that can serve as an administrative group
before adding users to it. Use the ADD GROUP command, as described in Section 3,
Managing User Groups.
Adding Users to the System
When a new user is added to a system with the Safeguard software, whoever adds the
user can define several security attributes for the user. The Safeguard subsystem uses
these attributes to control user access to the system.
Table 2-1 on page 2-6 describes the user security attributes and gives the predefined
default value for each attribute. The predefined attribute values are in effect when you
start a SAFECOM process.