Users Guide

132 Using Microsoft Active Directory
3 Type in a name for the new object. This name must match the Active
Directory product name
as discussed in "Configuring Active Directory
Using CLI on Systems Running Server Administrator".
4 Select the appropriate Product Object .
5 Click OK .
Creating a Privilege Object
Privilege Objects must be created in the same domain as the Association
Object to which they are associated.
1
In the Console Root (MMC) window, right-click a container.
2 Select New .
3 Select a RAC, Server Administrator, or IT Assistant object, depending on
which you have installed.
The
New Object window appears.
4 Type in a name for the new object.
5 Select the appropriate Privilege Object .
6 Click OK .
7 Right-click the privilege object that you created and select Properties .
8 Click the appropriate Privileges tab and select the privileges that you want
the user to have (for more information, see Table 9-2 and Table 9-8).
Creating an Association Object
The Association Object is derived from a Group and must contain a group
Type. The Association Scope specifies the Security Group Type for the
Association Object. When you create an Association Object, you must choose
the Association Scope that applies to the type of objects you intend to add.
Selecting Universal, for example, means that Association Objects are only
available when the Active Directory Domain is functioning in Native Mode
or above.
1
In the Console Root (MMC) window, right-click a container.
2 Select New .
3 Select a RAC, Server Administrator, or IT Assistant object, depending on
which you have installed.