H3C Technologies H3C Intelligent Management Center - Manual (Page 68)

59
The authorized operators table lists all IMC operators. IMC operators include the administrator,
maintainers, and viewers. The administrator can manage all device user groups. TAM does not
allow canceling the administrator's management privileges to any device user group.
Select the check boxes next to the operators. Selected maintainers can manage the device user
group. Selected viewers can view information about the device user group.
6. Click OK.
Modifying a device user group or a sub-group
After you change the authorization policy of a device user group/sub-group, TAM controls the online
users in the device user group or sub-group as follows:
• TAM applies the shell profile configured in the original authorization policy to the online users.
• TAM applies the authorization condition and command set in the new authorization policy to the
online users.
TAM determines the authorization condition to which a device user belongs according to the new
authorization policy. The command set configured for the new condition applies to the device user
when the device user executes commands.
To modify a device user group or sub-group:
1. Click the User tab.
2. On the navigation tree, select Device User > Device User Groups.
The Device User Group list displays all device user groups.
You can modify all parameters except groups named Ungrouped. For more information about
modifying a device user group or a sub-group, see "
Adding a device user group " and " Adding a
sub-group ."
3. Click OK.
Deleting a device user group or a sub-group
After a device user group or sub-group is deleted, all device users in the group or sub-group are moved
to Ungrouped.
You cannot delete the following types of device user groups:
• TAM pre-defined device user group Ungrouped.
• Device user groups that contain sub-groups.
• Device user groups that are used by LDAP synchronization policies.
Deleting a device user group or sub-group does not affect the shell profiles that have been authorized for
the online users. If deleting a device user group or sub-group results in an authorization policy change,
the new authorization policy applies to the online users.
TAM determines the authorization condition to which a device user belongs according to the new
authorization policy. The command set configured for the new condition applies to the device user when
the device user executes commands.
To delete a device user group or sub-group:
1. Click the User tab.
2. On the navigation tree, select Device User > Device User Groups.