ibm-information-center/dist/eclipse/plugins/i5OS.ic.rzaef_5.4.0.1/rzaefprofile.htm

64 lines
4.1 KiB
HTML

<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en-US" xml:lang="en-us">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<meta name="dc.language" scheme="rfc1766" content="en-us" />
<!-- All rights reserved. Licensed Materials Property of IBM -->
<!-- US Government Users Restricted Rights -->
<!-- Use, duplication or disclosure restricted by -->
<!-- GSA ADP Schedule Contract with IBM Corp. -->
<meta name="dc.date" scheme="iso8601" content="2005-09-06" />
<meta name="copyright" content="(C) Copyright IBM Corporation 2000, 2006" />
<meta name="security" content="public" />
<meta name="Robots" content="index,follow"/>
<meta http-equiv="PICS-Label" content='(PICS-1.1 "http://www.icra.org/ratingsv02.html" l gen true r (cz 1 lz 1 nz 1 oz 1 vz 1) "http://www.rsac.org/ratingsv01.html" l gen true r (n 0 s 0 v 0 l 0) "http://www.classify.org/safesurf/" l gen true r (SS~~000 1))' />
<meta name="keywords" content="advantages, group profiles" />
<title>Profile characteristics</title>
<link rel="stylesheet" type="text/css" href="ibmidwb.css" />
<link rel="stylesheet" type="text/css" href="ic.css" />
</head>
<body>
<a id="Top_Of_Page" name="Top_Of_Page"></a><!-- Java sync-link -->
<script language = "Javascript" src = "../rzahg/synch.js" type="text/javascript"></script>
<a name="profile"></a>
<h4 id="profile">Profile characteristics</h4>
<p>On iSeries&trade;, a user profile can be used as either a user or a group profile.
That means someone can sign on to iSeries with a group ID and do work on the
system as a user. However, in NetWare, only user objects can be used to log
in and run applications. Groups are separate object types that are used only
to combine and then manage individual user objects as one entity. For example,
you can specify file access rights on a group object basis, and the users
belonging to those groups inherit those file rights.</p>
<p>You can define an iSeries profile as a user object in one NDS tree and
as a group object in a <span class="italic">different</span> NDS tree.
However, you cannot define an iSeries profile as both a group and a user
in the same NDS tree.</p>
<p>You can define iSeries group profiles as user objects on NetWare. However,
group members in these profiles are not automatically enrolled on NetWare.</p>
<p>Defining iSeries user profiles as group objects on NetWare has these <span class="bold">advantages</span>: </p>
<ul><a id="idx77" name="idx77"></a>
<li>Using groups reduces the number of profiles that you must individually
enroll in your network. When you enroll an iSeries group profile and its members
to a NetWare server, the user profiles that belong to the group enroll automatically.</li>
<li>Using groups also reduces the number of profiles for which you need to
define NetWare security. You can set rights and attributes for a group object,
and the group members inherit those rights and attributes.</li>
<li>You can also use groups to better manage access to your network resources.
For example, if you install financial applications and data on a NetWare server,
you can grant access for that server to only the FINANCE group.</li></ul>
<p>When you enroll iSeries group and user profiles on NetWare servers, iSeries sends
only the information in the <a href="rzaefgrpprf.htm#grpprf">group</a> and <a href="rzaefusrprf.htm#usrprf">user</a> profiles that applies to NetWare. The profile information that you
specify for those iSeries attributes overwrites the corresponding NetWare attributes.
Thus any changes that NetWare users make to these attributes are overwritten
when you propagate the iSeries profile changes.</p>
<p>You can add additional NetWare group and user attributes, such as user properties
for a telephone number, fax number, and last name, from the NetWare NWADMIN
utility.</p>
<a id="Bot_Of_Page" name="Bot_Of_Page"></a>
</body>
</html>