68 IBM Content Manager OnDemand Guide
3.2.2  System administration
Content Manager OnDemand can centralize or decentralize the administration of the system. 
A centralized environment means that one type of user, a system administrator, controls the 
creation and access to all of the objects that are defined on the system. A decentralized 
environment means that the tasks of the system administrator are divided and assigned to 
other users. The responsibilities of the other users might vary from user administration, group 
administration, application group administration, folder administration, or any combination of 
the administrative tasks.
Y ou need to decide whether to centralize or decentralize the administration of the system 
before objects are added to the system. Although the decision is reversible, the amount of 
work that is required to change from one type of administration to the other can be significant 
if many users, groups, folders, and application groups are already defined to the Content 
Manager OnDemand system.
Many ways exist to decentralize the administration of the system because of the various user 
types and the additional authority levels that can be specified for users. Two specific models 
are described in this section: the object type model and the object owner model.
Object type model
In the object type model, which is shown in Figure 3-23, all of the objects on the system are 
logically grouped into administrative domains according to the type of the object. The 
administrator of a domain maintains all of the objects within the domain. For example, an 
application group, folder, or cabinet administrator maintains all of the application, application 
group, folder, and cabinet objects on the system.
Figure 3-23   Decentralized system administration - object type model 
In this model, the system administrator defines two new users. One user is responsible for 
administering applications, application groups, and folders, and this user is defined as an 
application group, folder, and cabinet administrator. The second user is responsible for 
administering users and groups, and this user is defined as a user administrator with the 
Create Groups authority. 
Table 3-1 on page 69 shows the administrative users and the tasks that are assigned to the 
users. 
System Administrator
Application Group/Folder/Cabinet Administrator
Application
Groups Applications Folders Cabinets
User Administrator with Create Groups Authority
Users Groups
Storage Sets System Printers