Restrict access to Full Access Administrator

HCL Domino Domino Forum
1

I have 4 administrators in the field “Administrators” of the Security tab of server document and I don’t want these administrators to change the field “Full Access administrators”.

They need to do all adminiustrators’ tasks (create/modify users and groups and manage the server) but only one must have the right of Full Access.

How can I do ?

Thanks.

2

Subject: Restrict access to Full Access Administrator

I know that you can restrict for every body at server level via a Notes.ini setting but i don’t think you can do it your way.

You can create an event if someone give himself Full Admin rights and then send an email to alert you.

JYR

3

Subject: RE: Restrict access to Full Access Administrator

Yes I can disable “Full Access Admin” by adding SECURE_DISABLE_FULLADMIN=1 in Notes.ini.

But I need 1 super admin with this right.

Olivier

4

Subject: Restrict access to Full Access Administrator

If your 4 admins can live with less than Manager Access to the N&A Book then you can set up the 1 super Admin in the N&A Book ACL’s Extended Access dialog box. It’s a bit of a hassle to walk through the dialog boxes, but you can specify the form/field and the single super admin in that field.

Now even Editors will find that they cannot change the values in that field.

regards,

raphael

5

Subject: RE: Restrict access to Full Access Administrator

Thanks it works but my 4 admins can’t create new users.My 4 admins have Editor level in the ACL with all roles.

When they want to create a new user, the creation fail for adding the new user in domino directory.

Could you help me ?

Olivier

6

Subject: RE: Restrict access to Full Access Administrator

any error message?

JYR

7

Subject: RE: Restrict access to Full Access Administrator

Nothing, just fail to create user and see local log for more information in Lotus Administrator.The mail box and id files are created. In the local log no more informations and in the server log : Adding user in domino’s directory and nothing more.

Everything is OK it’s just creating the person document in domino’s directory the problem.

Olivier