8.6 Modifying Agent Manager OnePointOp Group Membership

Agent Manager uses OnePointOp groups and database roles to restrict access to product functionality.

The Access Configuration utility allows you to add global domain groups to the OnePointOp groups. The utility also creates database logins for the global domain groups, and then adds the database logins to the appropriate database roles on the database server. You can also use the Access Configuration utility to repair invalid accounts.

If you added an account with a user interface other than the Access Configuration utility, the account is invalid. For a user account to be valid it must be a member of a global domain group that you added to a OnePointOp group with the Access Configuration utility. The Access Configuration utility must also create a database login for the global domain group.

If a global domain group contains an invalid user account, you can use the Access Configuration utility to repair the user account. The Access Configuration utility repairs the user account by resetting the database login. However, the Access Configuration utility cannot make a user account valid if the account does not belong to a global domain group already a member of one or more OnePointOp groups.

To add a user account to a OnePointOp group and database role, add the user account to a global domain group that is a member of the OnePointOp group.

NOTE:The Access Configuration utility does not manage membership of the global domain groups. Use Active Directory Users and Computers to manage account memberships of the global domain groups.

To modify memberships in OnePointOp Groups and database roles:

  1. Log on to a central computer with an account that is a member of the local Administrators group and a member of the Microsoft SQL Server sysadmin role on the database server.

  2. Start Access Configuration in the Configuration program group.

  3. In the left pane, click the OnePointOp group with memberships you want to modify. Complete one of the following steps:

    • To add a member, click Add.

    • To remove a member, click Remove.

    • To repair a member, select an invalid group member, and then click Repair.

  4. Repeat Step 3 for each OnePointOp group you want to modify.

  5. Click OK. For more information about fields on a window, see the Help.

  6. Repeat Step 1 Step 5 on each central computer.