| Oracle® Calendar Administrator's Guide Release 2 (9.0.4) Part Number B10892-02 |
|
|
View PDF |
| Oracle® Calendar Administrator's Guide Release 2 (9.0.4) Part Number B10892-02 |
|
|
View PDF |
Oracle Calendar offers a wide range of administrative rights that can be assigned to calendar users, covering calendar management (users, resources, event calendars, holidays, etc.) and server administration (starting and stopping nodes and servers, configuring initialization files, etc.).
This chapter contains an overview of the rights that can be assigned to users, and the methods available for assigning those rights.
Most of the administrative operations for Oracle Calendar can be performed by regular calendar users. The administrator (calendar system operator) must first grant the users administration rights. Different sets of rights can be granted to different users based on what they should manage: users, resources, event calendars, groups, node network, or calendar server.
These administrative rights limit the operations any given user can perform using the Calendar Administrator and command-line calendar utilities.
For example, it may be useful to give designated employees in Human Resources administrative rights for holidays. Those employees could then add, modify and delete holidays in the Calendar Administrator by signing-in with their own user name and password.
For a complete list of the individual rights that can be assigned in Oracle Calendar 9.0.4, see the uniadmrights utility in Appendix E, "Utilities" in the Oracle Calendar Reference Manual.
Each user's profile of administrative rights also has a scope that defines which nodes the user's rights apply to. The Node scope limits all administrative rights to the node on which the user's own calendar account exists. The Network scope extends the user's administrative rights to all nodes that are in the network which includes that user's node.
For example, in a scenario where nodes 30 and 40 are in a node network together, a user on node 30 with a Node scope may only modify users and resources on node 30. A user on node 40 with Network scope may modify users and resources on both nodes.
You can assign administrative rights to a user through the Calendar Administrator or the command-line uniadmrights utility.
Note that the ability to manage other users' administrative rights is itself covered by an administrative right. In addition, you may only assign rights that you possess, and you may only assign Network scope if you possess Network scope. For example, in order to assign resource creation administration rights to a user, you must possess both resource creation administration rights and the right to manage users' administrative rights.
Use the Calendar Administrator to grant administrative rights to users. Click the Calendar Management tab and then on Users at the top left. Search for the user you wish to grant administrative rights to and then click the pencil icon in the Actions column. Click Administrative Rights in the menu on the left.
Use the uniadmrights utility. For example:
% uniadmrights -u "S=Heller/G=Joseph" -n 22 -user "create=true/modify=true" -resource "all=true" -csm "all=false"
The preceding command line grants Joseph Heller on node 22 the ability to create and modify users (but not to delete, set access rights or passwords); all rights for resources (including the rights to create, modify, delete, set passwords, and set access, viewing and designate rights); and removes all access rights to the Calendar Server Manager, denying this user the ability to start and stop nodes and servers.
For more details on the uniadmrights utility, including syntax, accepted key-value pairs and a complete list of all available access rights, see Appendix E, "Utilities" in the Oracle Calendar Reference Manual.
