Authorizing manager 
With the employment authorizing managers with T2U for the assignment of starting 
Authorizations only one application (Application) is used named T2U.   Those 
Authorization on package level is regulated by procedure definitions (operation definition
). 
Abb.   90 
For the package named "Java run time" version "1.4.2_10" with the StartIds Install and 
University stable are for example two authorizing managers procedure definitions provided 
become:   "op_Java 2 Runtime_1.4.2_10_Install" and "op_Java Runtime_1.4.2_10_Uninstall". 
The general rule for the formation of procedure definitions reads: 
op___ 
In order to give to a user starting permission for a package in T2U on a computer, is 
one both the user account and the computer account entitles.  But one must 
after the authorizing manager concept a new role define and this role 
both appropriate procedures and user accounts and computer accounts assign. 
The authorizing manager permits still another abstraction layer between the procedure 
and the role:   the tasks.   If one parallel for example in the enterprise different 
One operates, can versions of the Java Runtime environment for all these versions both 
for the installation and for the Deinstallationsvorgang a task named "tsk _ 
Java 2 run time "define and all starting procedures of this task assign: 
Abb.   91 
Abb.   92 
Afterwards a role can based on the package names or e.g. on the fields 
or the department affiliation to be provided and the tasks "tsk _ Java 2 
Run time "the appropriate role to be assigned. 
Abb.   93 
Abb.   94 
In the end one must assign one or more application groups to the role.   Those 
Groups of users know user accounts, computer accounts, user groups or naturally 
other application groups contain. 
Abb.   95 
It is possible generally with the definition of tasks, roles and application groups, 
to have a nesting. 
Abb.   96 
Note: 
It is important to understand that T2U the user and 
Computer authorization based on process level examines.   Those 
Designation and the assignment of tasks, groups and roles 
is completely freely left to the T2U-administrator.  The roles can do those 
Groups, the firm's structure or the Businessrollen 
illustrate.  

Go to Help Contents