Creating the administrative account
To create an administrative account for Bravura Security Fabric , first create an administration group that can manage the Domino Directory. When creating an administration group, you must:
Name the group
Grant access to the database
Define the type of access being granted
To create an administration group with Domino Administrator:
From a Windows workstation, select Programs > Lotus Applications > Lotus Domino Administrator.
Log into Lotus Domino Administrator by typing your login ID and password in the appropriate fields.
Select the People & Groups tab.
Select Domino Directories > Groups > Add Group.
Type a name for the new group in the Group Name field of the Basics tab. Complete the remaining fields as necessary.
Click Save and Close to close the New Group window.
To give the group administrative rights to the Domino Directory:
Select the Files tab in the Lotus Domino Administrator window.
Right-click the
names.nsf
file in the middle pane and select Access Control > Manage.The Access Control List dialog box displays.
Click Add.
The Add User dialog box displays.
Click the user icon to view the Names dialog box.
Select the name of the new administration group from the left pane. Click Add to move it to the right pane.
Click OK to close the Names dialog box.
Select the name of the new administration group in the left pane of the Access Control List tab.
Set the Access drop-down list to
Manager
.In the Roles list box ensure
User Creator
,User Modifier
, andGroup Modifier
are selected.Click OK.
After you create the administration group, create the target system administrator account then add it to the group. To do this:
Create a new account.
See Creating a template account for more information.
From the Lotus Domino Administrator window, select the People and Groups tab, then select Groups to view the list of administration groups in the right pane.
Right-click the group name to which you want to add the account and select Manage Groups.
The Manage Groups window displays.
Select the name of the account from the left pane.
Select the name of the administration group to which you want to add the account from the right pane.
Click Add.
The name of the target system administrator account displays under the name of the administration group in the right pane.
Click Done to close the Manage Groups window.
The administrative account also requires appropriate permissions to access the certifier repository for ID files, which is named pscert.nsf by default, in order to be able to create new Lotus Notes users on the Domino server. In the access control list for pscert.ntf, set the account’s permissions as:
User type : Person
Access : Manager
and select Delete documents and Replicate or copy documents checkboxes.
See your Lotus Notes system administrator or Lotus Notes documentation for more information if necessary.