Chapter 13. Setting up roles and security 427
To change permissions on the IBM Tivoli Business Systems Manager registry
keys for the IBM Tivoli Business Systems Manager servers listed in the previous
section:
1. Open the Registry Editor (REGEDT32.EXE).
2. Highlight the registry key for
HKEY_LOCAL_MACHINE - SOFTWARE - Accessible Software, Inc.
3. Open the Security -> Permissions... menu, as shown in Figure 13-5.
Figure 13-5 Protecting TBSM registry key
428 Tivoli Business Systems Manager Version 2.1: End-to-End Business Impact Management
4. Change the permission option for the IBM Tivoli Business Systems Manager
registry key and its subkeys. We removed its inheritable security access and
only allowed the Administrators and local SYSTEM accounts to have full
control. Figure 13-6 shows the Permissions window.
Figure 13-6 TBSM registry permissions
Chapter 13. Setting up roles and security 429
5. Click the Advanced button to open the Access Control Settings window.
Be sure the Reset permissions is checked to propagate the settings for the
existing sub-keys, as shown in Figure 13-7 on page 429.
Figure 13-7 Advanced permissions setting
Click OK to return to the Permissions window, and click OK to close it.
13.1.3 Windows user ID and groups
The IBM Tivoli Business Systems Manager console is a restricted application.
Only authorized users should run it. Users are authenticated on the Console
Server to ensure that they are connected to the appropriate IBM Tivoli Business
Systems Manager groups. There are four levels of IBM Tivoli Business Systems
Manager authentication:
? TBSM_Administrator_Super
? TBSM_Administrator
? TBSM_Operator
? TBSM_Operator_Restricted
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.