Apple 10.6 Server User Manual


 
Chapter 7 Ongoing System Management 149
The following is the File Sharing conguration pane in Server Admin.
Tiered Administration Permissions
In previous releases of Mac OS X Server, there were two classes of users: admin and
everyone else. Admin users could make any change to the settings of any service or
change any directory data including passwords and password policies.
In Mac OS X Server v10.6, you can now grant individuals and groups specic
administrative permissions without adding them to the UNIX “admin” group. In other
words, you can make them administrator users.
There are two levels of permissions:
 Administer: This level of permission is analogous to being in the UNIX admin group.
You can change any setting on the server for the designated server and service only.
 Monitor: This level of permission allows you to view Overview panes, Log panes,
and other information panes in Server Admin, as well as general server status data
in server status lists. You do not have access to any saved service settings.
Any user or group can be given these permissions for all services or for selected
services. The permissions are stored on a per-server basis.
The only users that can change the tiered administration access list are users that are
in the UNIX admin group.