Configuration administrator

A configuration administrator determines which resources are available within an instance, and the attributes of these resources. A configuration administrator does this by:

• Defining configuration object types (CTs) and the attributes that COs based on these CTs can have
• Defining configuration object sets (COSs)
• Adding configuration objects (COs) to and removing COs from OUs
• Specifying or modifying the values of attributes

The scope of a configuration administrator can be either an entire instance or a specific OU:

• A system configuration administrator (SA) can administer all the CTs, OUs, COs, and COSs of an instance. An SA has the role DniSA assigned to their user ID for SYSOU.
• An OU configuration administrator (OSA) can administer certain COs of a particular OU. Which COs an OSA can administer is determined by roles assigned to them by a UA or OUA (see Security administrator). An OSA has, assigned to their user ID for a particular business OU, a role containing at least one of the CTs shown in Table 1. Each of these CTs corresponds to a command. An OSA can issue only those commands for which they have a role that contains the corresponding CTs. For example, you can create an OSA who is authorized to specify only the second half of the RM LAU keys for a particular OU.