10.12 Controlling Access to an Agent’s Local Repository

You can use standard Windows file system security to control who can access the local repository on an agent computer.

To set specific permissions for individual users or for groups:

  1. Select the local repository file. By default, the local repository is located in the AppManager installation folder under NetIQ\AppManager\db\Local-Repository.sqlite. For example, if you installed the AppManager agent in the folder C:\Program Files\NetIQ\AppManager, the default location for the local repository is C:\Program Files\NetIQ\AppManager\db\Local-Repository.sqlite.

  2. Right-click the file, then click Properties.

  3. Click the Security tab.

  4. Click Add to add users and groups to the access control list, if needed.

  5. Select the permissions you want to Allow or Deny for each user and group. For example, to prevent a user or group from accessing the local repository, in the Deny column click Full Control. Similarly, to give a user or group permission to view but not to modify the local repository, in the Allow column click Read.

    NOTE:In setting permissions for users and groups, be sure you do not change the permissions for the account the agent services use. If the agent services on an agent computer run under a Windows user account, that account must be allowed Full Control for the local repository file.

    If users are denied access to the local repository and attempt to open the file, they will see a message similar to the following:

  6. Click OK when you have finished setting user permissions to access the local repository.