Chapter 3. Administration 69
Table 3-1   Administrator roles in object type model
When they are maintaining application groups and folders, the application group, folder, and 
cabinet administrator must give other users access to the application groups, folders, and 
cabinets. The recommended and simplest way to perform this task is to give access to a 
group, rather than to individual users. No additional work is required by the application group, 
folder, and cabinet administrator when another user needs access to the application group, 
folder, or cabinet. When a new user is added to the group, the user automatically gets access 
to the application group, folder, and cabinet. Adding the user to the group is the responsibility 
of the user administrator because the user administrator owns all of the groups in this model.
Another reason for giving groups rather than individual users access to application groups 
and folders is that the application group, folder, and cabinet administrator does not have 
access to the users and groups in this model. Because the application group, folder, and 
cabinet administrator must first be granted access to any users or groups that require access 
to application groups, folders, or cabinets, it is simpler and less time-consuming to give 
access to a few groups rather than hundreds or even thousands of users. The application 
group, folder, and cabinet administrator is given access to a group by adding the application 
group, folder, and cabinet administrator to the group. This task is performed by the user 
administrator with the Create Groups authority. As a group member, the application group, 
folder, and cabinet administrator can see the group in the list and can grant group access to 
any application groups and folders on the system.
To give an application group, folder, and cabinet administrator access to a user, the user 
administrator with the Create Groups authority must update each user and give the 
application group, folder, and cabinet administrator access to the user. After access is 
granted, the application group, folder, and cabinet administrator can see the user in the list 
and can grant the user access to any application groups, folders, and cabinets on the system. 
Again, this approach is not recommended because this task must be repeated each time that 
a user is added to the system.
Object owner model
In the object owner model, which is shown in Figure 3-24 on page 70, the objects on the 
system are logically grouped into administrative domains according to the creator or owner of 
the object. An administrator maintains only the objects that they create. For example, a user 
with Create Application Groups and Create Folders authority can maintain only the 
applications, application groups, and folders that they created.
Administrator type Ad ministrative tasks
System administrator Creates report administrators.
Creates user administrators with Create Groups authority.
Creates and maintains storage sets.
Creates and maintains system printers.
Application group, folder, and 
cabinet administrator
Creates and maintains application groups.
Creates and maintains applications.
Creates and maintains folders.
Creates and maintains cabinets.
User administrator with Create 
Groups authority
Creates and maintains users.
Creates and maintains groups.