Groups and Their Privileges384 Netscape Certificate Management System Installation and Setup Guide • March 2002Groups and Their PrivilegesIn Certificate Management System, a group refers to a collection of privilegedusers—administrators, agents, or trusted Registration Managers. Each group haspredetermined privileges, based on its access control. All users belonging to agroup automatically inherit the privileges of that group.When you installed Certificate Management System, it automatically created thefollowing groups for the subsystems you installed:• Group for Administrators• Groups for Agents• Group for Trusted ManagersThese default groups are created in the internal database of the appropriate CMSinstance. They can help you set up your privileged users quickly and easily.You can add new privileged users to these groups; see “Setting Up PrivilegedUsers” on page 388. You cannot delete or change the group names. Also, don'tchange the internal database in which the groups are stored.Group for AdministratorsDuring installation, Certificate Management System automatically creates a groupcalled Administrators and adds a user to this group; the server sets the name ofthis user to the certificate administrator ID (of the CMS administrator) you specifiedduring installation. If you don’t remember this name, see the installationworksheet you completed in preparation for installing the system (see(“Administrator” on page 191). For example, if you specified admin as the user IDfor the CMS administrator, the name of the user in the Administrators group willbe admin.Keep in mind that the Administrators group must always contain at least oneuser entry. This means you can delete the entry that was created in this groupduring installation, provided you add another user to the group.After installation, be sure to do the following:1. Log in to the CMS window with the administrator ID and password specifiedduring installation.
