User account configuration
The ISSO and SA work together to configure user accounts on the system. The ISSO is primarily responsible for managing security-related user attributes and the SA is primarily responsible for other user attributes.
The ISSO performs the following tasks for each user:
- Configures clearance. See the chsec and chuser commands for more information
- Configures roles and authorizations
- Configures user groups
- Sets the home directory clearance level. See the settxattr command for more information
- Sets the password
- Sets the audit masks
The SA performs the following tasks:
- Configures user accounts
- Informs the ISSO of new user accounts that require security attributes