Installation manual

Chapter 5 Understanding and Controlling Access Privileges 71
To create an administrator access group:
1 Create groups as usual.
If you’re using Mac OS X Server, you use Workgroup Manager to make them.
2 After you have created groups, you edit either the computer record of the computer to
be administered, its computer group record, or the guest computer record.
3 Use a text editor, or the Apple Developer tool named Property List Editor to build
the MCXSettings attribute XML. The XML contains some administrator privilege key
designations (ard_admin, ard_reports, etc.), and the groups that you want to possess
those privileges. The following privilege keys have these corresponding Remote
Desktop management privileges:
Management
Privilege
ard_admin ard_reports ard_manage ard_interact
Generate reports X X X
Open and quit
applications
X X
Change settings X X
Copy items X X
Delete and replace
items
X X
Send messages X X X
Restart and shut
down
X X
Control X X
Observe X X
Show being
observed
X X
In the XML, you name a privilege key and make the value the name of the group or
groups you want to possess the privilege.
Use the sample XML below to make your management/key designation XML.
4 In Workgroup Manager, enable the Inspector by choosing Workgroup Manager >
Preferences, and then selecting “Show ‘All Records’ tab and inspector.”
5 Click Accounts, select the computer or computer group records you want to manage,
and then click Inspector.