Address Manager object hierarchy and access right rules - BlueCat Integrity - 9.5.0

Address Manager Administration Guide

Product name
BlueCat Integrity

DNS and network information in Address Manager are arranged as a hierarchy of objects, beginning with the Address Manager server itself at the highest level. If an object contains child objects, those objects inherit any access rights and overrides you set on their parent. For example, access rights set on an IPv4 network are inherited by the IPv4 DHCP ranges and IPv4 addresses within the network.

You can assign Address Manager access rights to both users and groups, and multiple rights can exist for the same object. A single user may have both an access right and multiple overrides on an object, while multiple users could also have access rights and overrides on the same object. Three rules determine a user’s access rights for any object within Address Manager:
  • Administrators always have full control over any system object.
  • The most local access right takes precedence over any other rights assigned higher in the object hierarchy.
  • In the case of conflicting access rights for an object, the most permissive access right always takes precedence.