Access Rules and Administrators

An Administrator's database access can be defined as any of three levels of access, as detailed in the following table. HPCA Administrator CSDB Editor administrator access rules are stored in the ZACCESS Domain.

Administrator Access-Level Values
Access Value Definition
ALLOW Configuration Server does not check the administrator access rules before granting access to an administrator. This value disables all administrator access-rule checks, even if they are defined in the database.
DENY Configuration Server checks administrator access rules before granting access to an administrator. An administrator will be unable to perform an action unless there is an access rule defined in the database for that administrator specifically allowing it. This is the recommended setting when configuring administrator security.

Note: If this option is specified, undefined administrators will not have access to any CSDB administrator functions, unless the ADMINID._NULL_INSTANCE_ is modified to enable access to those functions.

IGNORE Configuration Server checks administrator access rules before granting access to an administrator. An administrator will be able to perform an action unless there is an access rule defined in the database for that administrator specifically prohibiting it.

All Configuration Servers have an edmprof file. This file is divided into multiple sections, and it defines the operational parameters for the Configuration Server, including its behavior regarding administrator access to the CSDB as described in the preceding table "Administrator Access-Level Values". The administrator access parameters are located in the MGR_ACCESS section.

To set the administrator access value:

  1. Shut down the Configuration Server.
  2. Open the edmprof file.
  3. Specify the ADMIN setting with one of the access values.
  4. Save and close the edmprof file.
  5. Restart the Configuration Server.


© 1993 - 2012 Hewlett-Packard Development Company, L.P.