Security Management Guide (G06.24+, H06.03+)

Concerns for the User
Security Management Guide—522283-008
5-5
Privileged User Classes
This example shows a user name in which ROBIN is a member of the SALES
administrative group:
SALES.ROBIN
Similarly, this example shows a user name in which PAT is a member of the SALES
group:
SALES.PAT
The fact that Robin and Pat share administrative group membership also entitles them
to privileges extended only to group members. For more information about these
privileges, see Group Membership on page 5-7.
User IDs
Your user ID is in the form:
group-number,member-number
where group-number is an integer (from 0 through 255) denoting the administrative
group to which you belong, and member-number is an integer (from 0 through 255)
denoting you, a particular member of your administrative group.
Your user ID and user name are unique and (generally) interchangeable.
Privileged User Classes
Three user classes have privileges beyond those of ordinary users. These classes are
distinguished by the value 255 in the user ID. Table 5-1 shows the user IDs
corresponding to these classes and the user names typically assigned to these IDs.
If you are a general user, you might have to call on a privileged user to handle certain
tasks. If you are a privileged user, you might have to handle some tasks for a general
user.
Privileges of the Super ID
The local super ID (255,255) has unrestricted access to the entire local system unless
Safeguard security mechanisms have been used to restrict the powers of the super ID.
Table 5-1. Privileged User Classes
User Class Typical Logon Name User ID
super ID SUPER.SUPER 255,255
System Operator SUPER.OPERATOR 255,n
Group Manager group-name.MANAGER n,255
n = an integer from 0 through 254
group-name = a valid administrative group name