Digipass Plug-In for SBR Administrator Reference - Vasco

Digipass Plug-In for SBR Administrator Reference Set Up Active Directory Permissions
Digipass User Account Link – the link attribute used to share a Digipass between two
user accounts
Digipass User Account Stored Password – the Stored Password attribute
Write permission for any individual properties on Digipass objects, except for one
Property Set that is defined to control the Digipass assignment link
Write permission for any individual properties on Digipass Application objects, except for
one Property Set that is defined to include the Digipass 'blob' that is required for any
administrative operation such as Reset PIN, Test, Set Event Counter, etc.
Create and delete permission on Digipass and Digipass Application objects (note that this
can be necessary for assigning Digipass to users, because a move from one location to
another is controlled by permissions to delete from the source and create in the
destination)
5.2.4 System Administrators
The term 'System Administrator' is used here to refer to an administrator who will be
responsible for management of the Component and Policy records, rather than Digipass User
Accounts and Digipass. They need permissions within the Digipass Configuration Container to
create, modify and delete Component (vasco-Component) and Policy (vasco-Policy) objects.
In practice, System Administrators can typically be given full control over the Digipass-
Configuration container. If you wish to grant more limited permissions, this can be handled
with the standard Active Directory permissions on these objects within the scope of the
container.
5.3 Assign Administration Permissions to a User
Note
This example assumes that the administrator's User account has read
permissions for all User records already.
To grant permissions to manage Digipass records, you will need to follow these steps:
1. Right-click on the Organizational Unit in which to assign permissions.
2. Select Delegate Control... from the right-click menu.
3. The Delegate Control Wizard will be displayed.
4. Select the User or Windows Group to assign permissions.
5. Click on OK.
6. Select the Delegate Common Tasks option button.
7. Select Create, Delete and Manage Digipass from the list.
8. Click on Next.
9. Click on Finish.
If you wish to grant permissions to modify Digipass User Account properties, you will need to
follow these steps:
© 2006 VASCO Data Security Inc. 64