7.5 Credential Rights

The Credential Rights dialog box lets you control the operations that the selected administrator can perform to manage credentials.

7.5.1 Contexts

Specify the Credential folders (contexts) that you want the administrator’s Credential rights to apply to. To select a folder, click Add to display the Contexts dialog box, browse for and select the folder (or multiple folders), then click OK. The rights also apply to the folder’s subfolders.

7.5.2 Privileges

The Privileges section lets you grant the selected administrator rights to create or modify credentials, groups, and folders listed in the Contexts section.

The following rights are available:

RIGHT

OPERATIONS CONTROLLED BY THE RIGHT

NOTES

View Leaf

  • View the contents in the specified context (folder and subfolders)

Setting the View Leaf right to Deny forces all other Credential rights to Deny. The View Leaf right must be set to Allow to perform any other credential operations.

Modify

  • Rename a credential

  • Change a credential’s login name

  • Change a credential’s password

  • Change a credential’s description

 

Create/Delete

  • Create a credential

  • Move a credential to a different folder

  • Delete a credential

 

Modify Folders

  • Rename a credential folder

  • Change a folder’s description

To rename a folder, an administrator must have this right and the Modify right.

Create/Delete Folders

  • Create a credential folder

  • Delete a credential folder

  • Move a credential folder to another folder

To move a folder, an administrator must have this right and the Create/Delete right.

For more information about the tasks you can perform on credentials, see Using the Credential Vault in the ZENworks Control Center Reference.