4.1 Security Guidelines

This section explains the security guidelines for Systemwalker Operation Manager.

Positions and roles of Systemwalker Operation Manager users

To use Systemwalker Operation Manager securely, there must be a clear distinction between the role of administrators and the roles of other users.

A system administrator must be a trustworthy person who would not perform any inappropriate operations.

The following table shows the positions and roles of the different Systemwalker Operation Manager users.

OS user	Systemwalker Operation Manager user	Description	Role
System administrator	System administrator	A person who has administrator privileges for the server devices that make up the business system (either a member of the Administrators group (for Windows) or a superuser (for UNIX))	Registers and deletes operations administrators and operations staff, and also performs the role of operations administrators. When necessary, the system administrator can perform the duties of both operations administrator and operations staff.
System administrator	Operations administrator	A person who manages operations staff and overall business operations	Sets the range of responsibilities of operations staff in a business system. When necessary, an operations administrator can also perform the duties of operations staff.
General user	Operations staff	A person responsible for operation duties	Performs operation duties in a business system within the range permitted by an operations administrator.

Note

This chapter uses the user classification that is shown in the "Systemwalker Operation Manager user" column in this table.

However, other Systemwalker Operation Manager manuals basically use the user classification that is shown in the "OS user" column in this table. When the Extended User Management function is used, an operations administrator refers to an Operation Manager user (i.e., a user registered with and managed under Systemwalker Operation Manager by the Extended User Management function) with administrator privileges, and operations staff refers to an Operation Manager user who does not have administrator privileges. Also, when the Systemwalker authentication repository is used, operations administrators are called system administrators (in Windows, this is the built-in Administrator account, and in UNIX it is the superuser), and operations staff are called Systemwalker users.