Can I delegate what rights a user has on SVS?

Article:HOWTO2797  |  Created: 2006-03-16  |  Updated: 2009-10-26  |  Article URL http://www.symantec.com/docs/HOWTO2797
Article Type
How To



Question
What kind of rights can I delegate to my users when SVS/SWV is on their computer?  I only want them to be able to perform a few of the commands on SVS/SWV.

Answer

In order for a user to manipulate the SVS/SWV system or layer data through SVSAdmin, that user must be an administrator. There are two exceptions: the rights to activate and deactivate can be delegated. 

For SVS 2.0 through SWV 6.1 build 4113:
  • Users that have Read access to a key named HKLM\System\Altiris\FSL\Rights\Activate will be able to activate layers via SVSCMD or SVSAdmin.
  • Users that have Read access to a key named HKLM\System\Altiris\FSL\Rights\Deactivate will be able to deactivate layers via SVSCMD or SVSAdmin.
  • Users that have rights to change the permissions on these keys will be able to modify these privileges for other users.
For SWV 6.1 build 5104 and higher :
  • Users that have Read access to a key named HKLM\System\CurrentControlSet\Services\FSLX\Parameters\FSL\Rights\Activate will be able to activate layers via SVSCMD or SVSAdmin.
  • Users that have Read access to a key named HKLM\System\CurrentControlSet\Services\FSLX\Parameters\FSL\Rights\Deactivate will be able to deactivate layers via SVSCMD or SVSAdmin.
  • Users that have rights to change the permissions on these keys will be able to modify these privileges for other users.

The other functionalities (Import, Delete, Reset, etc.) cannot be delegated and can only be performed by Administrators on the system.


Legacy ID



20743


Article URL http://www.symantec.com/docs/HOWTO2797


Terms of use for this information are found in Legal Notices