Managing Users › How Delegated Security Works › Access Rights Considerations

Access Rights Considerations

Before assigning user permissions, you should consider the following general conditions.

• All users are Windows domain or local users.
• A Super User has the right to create a new scenario.
• A Super User or Admin can assign users or groups of users to any scenario and delegate rights to the users or groups through CA ARCserve RHA Manager.
• The user or group list with the respective rights is stored in the standard NTFS ACL, applied to the scenario file.
• Super User can change the Super User group. However, after the change, the rights to all existing scenarios must be reassigned.
• Users are allowed to set or change a Super User group which is recorded in an encrypted registry. All Super Users belong to the group.
• The Access Control List is controlled indirectly via Control Service. Since Multiple GUI sessions may connect to one Control Service, the impersonation of each user account becomes indispensable.