5.8 Modifying Trustee Rights

To perform tasks within the identity applications, users must have specific trustee rights.

5.8.1 Modifying the Trustee Rights for User Preferences

To allow user preferences to be saved, the administrator must ensure that the permissions on the srvprvUserPrefsPlus and srvprvQueryList attributes are set so that the user is able to write to these attributes. The necessary rights should be set for [This] at the tree root level, since [This] is a special alias to the object itself, causing only the user to have rights to modify its own preferences. To set the proper permissions, the administrator needs to modify the trustees for these attributes in iManager, as shown below:

The srvprvUserPrefsPlus property has no space limitations, so it can save a large amount of user preference information. If you have used the srvprfUserPrefs property in a previous release, this property will be migrated to srvprvUserPrefsPlus the first time a user saves new preferences in the User Application.

5.8.2 Modifying the Trustee Rights for a Provisioning Request Definition

To view the details and comments associated with a task in the Task Notifications section of the Work Dashboard tab, the Domain Administrator or Delegated Administrator must have the proper rights to the provisioning request definition. In particular, the user must have the nrfAccessMgrTaskAddressee right to the provisioning request definition, with write access enabled. To set the proper permissions, the administrator needs to modify the trustees for the provisioning request definition, as described below:

  1. Log into iManager as an administrator.

  2. Select Modify Trustee from the Rights left-navigation menu.

  3. Browse to the provisioning request definition.

  4. If necessary, click Add Trustee to add the user.

  5. Click on the Assign rights link.

    Notice that nrfAccessMgrTaskAddressee is not listed with the write permission checked, which means that the user does not have the proper rights for the provisioning request definitiion.

  6. Click the Add Property button.

  7. Check the check box for Show all properties in schema.

  8. Select nrfAccessMgrTaskAddresss.

  9. Check the write checkbox for Assigned Rights.

  10. Click Done.

  11. Click OK.