050-696 · Question #135
Which eDirectory object right, when granted to the server object in the tree, will automatically grant a user all file system rights to each volume on the server?
The correct answer is E. Supervisor. eDirectory entry rights control what a trustee can do with eDirectory objects. The Supervisor entry right is unique in that it also bridges into the file system, granting full file system rights to volumes on the server.
Question
Options
- ABrowse
- BCreate
- CDelete
- DRename
- ESupervisor
- FInheritable
How the community answered
(39 responses)- B5% (2)
- D10% (4)
- E82% (32)
- F3% (1)
Why each option
eDirectory entry rights control what a trustee can do with eDirectory objects. The Supervisor entry right is unique in that it also bridges into the file system, granting full file system rights to volumes on the server.
Browse only allows a trustee to see the object in the eDirectory tree and does not grant any file system rights.
Create allows a trustee to create new objects subordinate to the object in the tree but does not translate into file system access on the server.
Delete allows a trustee to delete the eDirectory object itself but grants no file system rights to the server's volumes.
Rename allows a trustee to rename the eDirectory object but has no effect on file system rights for the server's volumes.
The Supervisor entry right on a server object in eDirectory automatically grants a user all file system rights (Read, Write, Create, Erase, Modify, File Scan, Access Control) to every volume on that server. This is because the eDirectory Supervisor right on a server object maps directly to file system trustee rights, making it the only entry right that crosses the boundary between the directory and the file system.
Inheritable is a flag that allows rights to flow to subordinate objects in the eDirectory tree but is not itself an entry right that grants file system access.
Concept tested: eDirectory Supervisor right granting file system access
Source: https://www.netiq.com/documentation/edirectory-92/edir_admin/data/a2iiiht.html
Topics
Community Discussion
No community discussion yet for this question.