How Do I Create User Account with "limited admin rights"?

Hello;
I would like to give a handful of users the ability to login to the DCC and enable them to add/delete/modify users and or hosts only, I.e. People and/or hosts.
Is there anyway to:
1.  Make a user with this admin capability?
2.  Segregate the containers they are able to modify?
Thanks to all in advance.

BobM53, That would be needed regardless of what front end my users log in with, in my case I was looking for them to access the DIT via the DSCC/DCC, which is not possible.  Regardless, thank you for your reply, it is reassuring to know I am headed in the right direction.
I am now looking towards installing something else like Apache Directory Studio, or some other GUI for users to manage the directory. 
I will most likely create one or more ACI's to build groups, adding members to those groups as needed; each group being allowed to perform functions such as create users, lockout users, add/modify hosts, etc.
I will most likely follow the steps outlined in:
Directory Server Groups, Roles, and CoS - 11g Release 1 (11.1.1.7.0)
Slightly OT, does anyone have a suitable and similar proven method to "lockdown" root accounts, and who has root access?
Thank you

Similar Messages

  • Newly created user packages with no admin rights

    Hi all,
    Have already opened a ticket with Novell on this one as i've never seen it before...
    Have upgraded a site to ZFD7 SP1 IR2 using the iso's from the Novell site, so it's a full upgrade install, everything went perfectly on the server, consoleone snapins upgraded fine and all
    however, if I try and create a user package with consoleone from the server, it hangs and never completes and I end up with packages with no rights for any users, so i'm unable to edit, delete or do anything with them
    also tried using a workstation with IR4 snapins which gives the same result, using a spare consoleone with earlier zfd7 snapins I can create packages with no issues
    Anyone run into this before and will we be able to get rid of these objects from the tree?
    And are the IR4 snapins not compatable with IR2?

    gleach1,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Visit http://support.novell.com and search the knowledgebase and/or check all
    the other self support options and support programs available.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.novell.com)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.novell.com/faq.php
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://support.novell.com/forums/

  • Help , how to auto create user account

    Hi, guys,
    i wanna to know how to auto create user account after use the suppliers' api to create supplier.
    i didn't find out how to auto create user account by use ap_vendor_pub_pkg.create_vendor_contact procedure.
    how to auto create the user account ?
    if you know ,tell me ,pls
    best Regards !
    Edited by: wanjin on 2013-4-15 下午11:50

    Hi Gareth,
    I wanna create an Oracle E-business Suite use account ,but how to use fnd_user_pkg.createuser procedure to relation the AP suppliers , not employee suppliers.
    the result like N:Purchasing Super User -->supplier-->Contact Directory --> create user
    then use "Create User Account for this Contact" to create user account
    Regards,
    Wanjin

  • Creating user accounts with OIDDAS and use them from the OS

    Hi,
    I have a customer that is experiencing an error creating user accounts from OIDDAS, and use that user accounts from the operating system.
    My customer is using OID/OAS4OS 10.1.4.2.0, and that version is not longer available to download, then, I will try in my own environment
    with OID/OAS4OS 10.1.4.3.0.
    And the question is the following: is supported to create user accounts with OIDDAS and expect that users can work with OAS4OS and be
    able to authenticate in the operating system?
    For the reference, SR# 7222351.993:
    Thanks,
    Luis Vivero.
    Edited by: LV in ORCL on Dec 11, 2008 6:47 AM

    Hi Jacco,
    I didn't see your post before.
    Nop, unfortulately I don't have a document with that. I just received that answer
    from development (related to the plugin for AD that is not certified, and DAS is
    not intended to work with OAS4OS).
    Anyway, about the plugin to work with AD, this is working for me; at least I tested
    it by configuring the plugin, I configured synchronization, the mapping file, I did
    the bootstrap, and the accounts that were bootstraped now shows the OS attributes
    on DAS.
    Regards,
    Luis Vivero.

  • How do I remove user account with UID=0 (except of root)

    Macbook Pro 13; I have Parallels software and did not realize I needed to upgrade to version 10 before upgrading to OS X Yosemite.  I get an error stating Parallels 10 cannot be installed because there is a user account other than root that has UID=0.  I checked UIDs in Terminal Utilities and there is one other username with UID=0  How do I remove username peggy?
    MacBook-Pro:~ pmcvicar$ dscl . -list /Users UniqueID
    _amavisd                83
    _appleevents            55
    _appowner               87
    _appserver              79
    _ard                    67
    _assetcache             235
    _astris                 245
    _atsserver              97
    _avbdeviced             229
    _calendar               93
    _ces                    32
    _clamav                 82
    _coreaudiod             202
    _coremediaiod           236
    _cvmsroot               212
    _cvs                    72
    _cyrus                  77
    _devdocs                59
    _devicemgr              220
    _displaypolicyd         244
    _distnote               241
    _dovecot                214
    _dovenull               227
    _dpaudio                215
    _eppc                   71
    _ftp                    98
    _geod                   56
    _iconservices           240
    _installassistant       25
    _installer              96
    _jabber                 84
    _kadmin_admin           218
    _kadmin_changepw        219
    _krb_anonymous          234
    _krb_changepw           232
    _krb_kadmin             231
    _krb_kerberos           233
    _krb_krbtgt             230
    _krbfast                246
    _krbtgt                 217
    _launchservicesd        239
    _lda                    211
    _locationd              205
    _lp                     26
    _mailman                78
    _mcxalr                 54
    _mdnsresponder          65
    _mysql                  74
    _netbios                222
    _netstatistics          228
    _networkd               24
    _nsurlsessiond          242
    _nsurlstoraged          243
    _pcastagent             55
    _pcastlibrary           225
    _pcastserver            56
    _postfix                27
    _postgres               216
    _qtss                   76
    _sandbox                60
    _screensaver            203
    _scsd                   31
    _securityagent          92
    _serialnumberd          58
    _softwareupdate         200
    _spotlight              89
    _sshd                   75
    _svn                    73
    _taskgated              13
    _teamsserver            94
    _timezone               210
    _tokend                 91
    _trustevaluationagent   208
    _unknown                99
    _update_sharing         95
    _usbmuxd                213
    _uucp                   4
    _warmd                  224
    _webauthserver          221
    _windowserver           88
    _www                    70
    _xcsbuildagent          237
    _xcscredserver          238
    _xgridagent             86
    _xgridcontroller        85
    daemon                  1
    deputydebi              504
    Guest                   201
    nobody                  -2
    peggy                   0
    pmcvicar                501
    root                    0
    MacBook-Pro:~ pmcvicar$

    BobM53, That would be needed regardless of what front end my users log in with, in my case I was looking for them to access the DIT via the DSCC/DCC, which is not possible.  Regardless, thank you for your reply, it is reassuring to know I am headed in the right direction.
    I am now looking towards installing something else like Apache Directory Studio, or some other GUI for users to manage the directory. 
    I will most likely create one or more ACI's to build groups, adding members to those groups as needed; each group being allowed to perform functions such as create users, lockout users, add/modify hosts, etc.
    I will most likely follow the steps outlined in:
    Directory Server Groups, Roles, and CoS - 11g Release 1 (11.1.1.7.0)
    Slightly OT, does anyone have a suitable and similar proven method to "lockdown" root accounts, and who has root access?
    Thank you

  • Lion Reinstall opens new account with no admin rights

    The story so far is that I very stupidly deleted the contents of my 'Private' folder with catastrophic consequences when I went to restart.  I left the contents in the trash but when I went to restart, I simply got the apple logo and spinning wheel. Using my iPad, I went through various options to try reboot before learning that I could reinstall the operating system (Lion) from the recovery disk.  This I did, upon which it asked me to sign up as a new user etc. - I followed all the instructions and got started again.  However I cannot now access any of my files, even though I can see them on the hard drive (I "do not have permission to see the contents of the files").  When I try to use System preferences, it looks as though it might start up, but then just doesnt.  I have reinstalled the whole thing again, but t just went back to asking me to login with the username I set up upon the first reinstall.  I never used to have to put in any password - it just started up straight away.  I am the only user of the computer so have no need for user accounts.  I cant seem to find any info on this problem.  Can someone help?
    Much appreciated.

    Are the users and groups local or in an OD master?

  • Creating User Accounts So I Can Set Parental Controls?

    My nine year old son loves to use YouTube to watch video game videos and apparently there are NO parental controls or any kind of filters on YouTube. The majority of the ones he finds are ok but there's about 15% that are just plain shocking even to me. Its pretty sad the things that people put up there. I hate to have him never be able to get online again so I want to set some sort of filter where I can block content according to keyword but I just cant figure it out at all. So I tried to set controls over the whole MacBook but it tells me that as administrator I cannot. I cant figure out how to create non-admin users though. Searched all the forums and guides, etc. but no answer.
    Thanks, so in summary, I just want to know how to create user accounts if thats the right term.
    I am using a MacBook, running Mac OSX version 10.4.11.

    Hi
    Apple menu (top left hand corner) > System Preferences > Accounts. Click the lock to authenticate. Just above the lock are two icons; a 'plus' and 'minus'. Click the 'plus' icon. Enter the name of your son, tab down into the next field and that should autofill for you with the information you placed in the name field; tab down again and enter a password; tab again to key in the password again; don't tick the box that says "allow user to administer this computer"; click 'Create Account'. You should be prompted with a window asking if you want to leave automatic login on or if you want to turn it off - turn it off. You'll see why later on. What you should see after this has finished is in the left hand window at the top your account details with your name and underneath it should 'Admin' and below your account details will be your son's. Underneath his name it should say 'Standard'.
    Click on his name to select it and now click on the Parental Controls tab on the right hand side of that window. You should now have the option to enable and configure control for the 5 applications listed there: Mail, Finder & System, iChat, Safari and Dictionary. Explore and configure to your hearts content from there. When you are happy quit out of System Preferences and select Log out from the Apple Menu. You should now be presented with the Login Window displaying not only your account but also the newly created one for your son. Log in s your son and test to see if what you've set as a control has worked. Keep going backwards and forwards between the two accounts until you are happy.
    Bear in mind there is only so much you can do.
    It's virtually impossible to block everything potentially morally harmful without basically stopping your son from having any access at all. You could look at supplementing Parental Controls with the built-in filters in your router - if you have one? If you don't then consider getting one. I'm struggling to think of a router for residential use that does not have some sort of built-in web filter?
    The tab button is the key immediately to the left of the 'Q' key. It will have an arrow going from left to right printed on it.
    Tony

  • Need my user account to have sysdba rights. Can't get it to work.

    Hi All,
    I have installed sql developer and i don't know how to change my user account to have system rights. when i try to login as sysdba i keep getting errors. I have tried a tutorial, the one were you're suppose to create an hr account but I can't even create that either, i keep getting the same error.
    I have un-installed sql developer twice and each time when I'm re-installing the software i never get the question to create a password for sys or sysdba, it seems that the old dll or ini file are still in the system. So, i just have access as default user and I might have missed the migration part when i first installed this thing. Any ideas? Do I need to download the enterprice manager in order to fix this (that will do it right?), or?? I have no clue at this point. Also, I was thinking that i should be able to change my user account manually somewhere in the orapassw doc. Is that an option? As you can tell im lost and i have a job deadline in the next couple of days, so please if anyone could take a look at my problem wood be wonderful and much appreciated.
    Thx

    SYSDBA should never be used for anything other than backups and patching.
    Which of these two activities do you think appropriate for a user account?
    My answer is the same as Sybrand's. What you are asking is totally inappropriate.
    Far better to tell us specifically which actions you wish to perform and we will
    help you with the specific permissions you require.

  • I am new to IPAD and I want o use facetime, how can I use it to communicate with my mac at home, do I need to create another account with a different email account

    I am new to IPAD and I want o use facetime, how can I use it to communicate with my mac at home, do I need to create another account with a different email account

    do I need to create another account with a different email account
    Yes, the email addresses need to be unique to each device. You may use the same Apple ID on each device, but the email address used by each device needs to be different.

  • After downloading Mozilla Firefox 4.0 Beta to my desktop I restarted the computer, but I do not receive any prompts to create an account with a Secret Password. How do I set up the account if the prompt never show up?

    Several months ago I installed the Firefox Home app on my iPhone to sync the bookmarks that I had on my Windows XP home computer. It has worked just fine until a few days ago. Just recently I was notified that the app would no longer work because of changes that have been made. I have tried to follow the instructions that were emailed to me regarding how to setup the new Firefox Sync add-on, but I am having a problem. After downloading Mozilla Firefox 4.0 Beta to my desktop and restarting my computer, I do not receive any prompts to create an account with a password and a secret phrase, as the instructions specify. How do I set up the account if the prompt never shows up?

    Click on the Firefox button then select Options to open the Options dialog. Now go to the Sync panel for the option to setup a new account.

  • New iMac 21.5". How can I set up a new user account with access to all the files of the original user account?

    Running Mavericks on a 2013 iMac 21.5". I want to set up a second user account with different settings that meet the requirements of specific software. I need the files to be accessible by both users. I have made both the main and secondary accounts administrators. I have also enabled file sharing for both. Neither account can see the other's files in Finder.
    How can I make all files accessible to both accounts? I read that administrator accounts automatically can see all files on the computer, but it is not working out that way. I have restarted the computer, to no avail.

    Comcast only offers POP accounts, and one way to set up the account and enter all the settings before it connects to the mail server, might be to do it Offline:
    https://support.mozilla.org/en-US/questions/991539#answer-547878
    The server settings are given [http://customer.comcast.com/help-and-support/internet/setting-up-thunderbird/ here], but the method is for Online account setup.

  • My daughters computer crashed along with her itunes library.  She can plug it into my computer so how do we create her account on my computer?  When we plug it in, it wants to replace her nano songs with my library.

    My daughters computer crashed along with her itunes library.  She can plug it into my computer so how do we create her account on my computer?  When we plug it in, it wants to replace her nano songs with my library.

              Not quite surewhat your asking exactly. You look here for different ways on importing media from nano to your computer! https://discussions.apple.com/thread/2417169?start=0&tstart=0

  • HT5312 Every time I do all the steps to reset the questions the only problem I have is that I noticed in the link to reset them using an email the email in the link don't match the one I created my account with. Does anyone know how to fix this problem?

    Every time I do all the steps to reset the questions the only problem I have is that I noticed in the link to reset them using an email the email in the link don't match the one I created my account with. Does anyone know how to fix this problem?

    You won't be able to change your rescue email address until you can answer your questions, you will need to contact iTunes Support / Apple to get the questions reset.
    Contacting Apple about account security : http://support.apple.com/kb/HT5699
    When they've been reset you can then use the steps half-way down the HT5312 page that you posted from to upadte your rescue email address for potential future use

  • Hi, I use two email addresses within one account with gmx.  I created one account with the first email address now. How do I add the second one to this account? Now it looks like this. One account was opened with address A. I receive in this account email

    Hi, I use two email addresses within one account with gmx.
    I created one account with the first email address now. How do I add the second one to this account?
    Now it looks like this.
    One account was opened with address A.
    I receive in this account emails for address A and B.
    But I can only write and answer with address A.

    Hi Rudegar,
    Sorry for my late reply.
    It s not the amount of accounts I'm struggling with.
    When I create now for both email addresses one account, then I receive the same emails two times.
    That is not what I want.
    Because on gmx the two email addresses have the same inbox and outbox.
    E.g. I can login to my gmx account either with email A or B. It doesn't matter.
    Now I want to have the same on my ipad.
    One account with both email addresses.

  • I'm a new Mac user....how can i create a "sticky" with automatically reoccurring bullet points?

    I'm a new Mac user....how can i create a "sticky" with automatically reoccurring bullet points?

    On my previous Mac (long, sad story) I had Office for Mac and liked it a lot.  I was collaberating on some fairly complex legal documents, and never noticed any compatibility problems with Windows Office.  That said, it is expensive.  For most documents, I simply open the Word document in Pages and export it to Word when I am finished.  I sometimes get the message that there is a missing font, but the computer uses a substitute that is quite acceptable.  I have never had someone say that they had difficulty with a document I exported to Word.
    Numbers and Excel aren't as compatible in my experience, and I have gotten some surprises when I hadn't tweaked the settings properly when exporting to Excel.
    The other component of iWork is Keynote, and I like it much better than Powerpoint; to me it is just easier to use. I have never tried converting back and forth between Keynote and Powerpoint.
    Depending on what grade your kids are in and what they are doing, I think I would start off with iWork and see what, if any, problems they encounter.  Of course, if they are going to use the computer for a class in Office or its components, your kids are going to need a Windows machine with Windows Office, because Office for Mac is enough different that when the teacher says, "Now, move your mouse here and click on....", your kids are going to be lost.
    Hope this is useful.

Maybe you are looking for

  • Macbook Pro 13' core i5 freezing constantly, what should i do to fix this?

    i bought my mac last week and to my surprise it started freezing and lag , having the spinning beach ball all the time , i spent hours reading on these topics but found no solution. Later on i sent it to the local apple technical service to ensure if

  • 9iDS Release 2 Report Designer Crashes

    I have had numerous crashes over the past few weeks using this tool. As a background, I now have about 25 reports. Sometimes, I go into each one and "tweak" the report to change parameter sizes, layout, footer, etc. I "hand" edit some of these becaus

  • Can't See Particular Flash Movie on Specific Site

    OP: Windows 7 Web browser: IE9 , chrome Flash version : 10.3.183.7 Hey, I recently bought a new acer TravelMate 5742Z computer. Now i'm having an issue in playing a particular movie on my student's web site(www.high-q.co.il) that is only working with

  • Using html tag in jsp

    hi i want to get a menu......something like what we have in the top of this page......but vertically....using a html tag..... on-mouse-over, each item opens up a list of hrefs.....

  • Job opening oracle financials consultant - permanent postion

    Hi All oracle EBS experts, We are looking for an oracle ebs r12 financial consultant with atleast 4-5 years experience, for a permanent position in a government sector in middle east. Please send me your resumes to [email protected] Candidates alread