Address Manager object hierarchy and access right rules - BlueCat Address Manager - 8.3.2

Address Manager Administration Guide

prodname
BlueCat Address Manager
version_custom
8.3.2

DNS and network information in Address Manager are arranged as a hierarchy of objects, beginning with the Address Manager server itself at the highest level. If an object contains child objects, those objects inherit the access rights and overrides set on their parent. For example, access rights set on an IPv4 Network are inherited by the IPv4 DHCP Ranges and IPv4 Addresses within the network.

Address Manager access rights can be assigned to both users and groups, and multiple rights can exist for the same object. A single user may have both an access right and multiple overrides on an object, while multiple users could also have access rights and overrides on the same object. Three rules determine a user’s access rights for any object within Address Manager:
  • Administrators always have full control over any system object.
  • The most local access right takes precedence over any other rights assigned higher in the object hierarchy.
  • In the case of conflicting access rights for an object, the most permissive access right always takes precedence.