DNS and network information in Address Manager are arranged as a hierarchy of objects, beginning with the Address Manager server itself at the highest level. If an object contains child objects, those objects inherit the access rights and overrides set on their parent. For example, access rights set on an IPv4 Network are inherited by the IPv4 DHCP Ranges and IPv4 Addresses within the network.
Address Manager access rights can be assigned to both users and groups, and multiple
rights can exist for the same object. A single user may have both an access right and
multiple overrides on an object, while multiple users could also have access rights and
overrides on the same object. Three rules determine a user’s access rights for any
object within Address Manager:
- Administrators always have full control over any system object.
- The most local access right takes precedence over any other rights assigned higher in the object hierarchy.
- In the case of conflicting access rights for an object, the most permissive access right always takes precedence.