You delegate access to Secure Password Administrator through the Directory and Resource Administrator (DRA) Delegation and Configuration console. The following two ActiveViews in DRA control the access to the Secure Password Administrator Admin site and the Secure Password Administrator Self-Service site:
- Adding accounts to or removing accounts from the DRA Admins Assistant Admin group controls access to the Admin site.
- Adding accounts to or removing accounts from the SPA Users from All Managed and Trusted Domains ActiveView controls access to the Self-Service site.
Creating a user account with DRA automatically adds that user account to the SPA Users from All Managed and Trusted Domains ActiveView. If you do not want to grant access to the Self-Service site to newly created user accounts, you must remove the accounts from the ActiveView.