The discretionary access control list (DACL) in the security descriptor (SD) of each object defines the types of access, or permissions that can be granted to users and groups.įor delegated administration of Forefront TMG it is possible to assign users and groups to administrative roles in Forefront TMG. A standalone Forefront TMG server can also be used to assign different administrative permissions.įorefront TMG implements access control to all parts of the TMG configuration in form of Windows Server 2008 security descriptors. Permissions can be assigned at the Enterprise level (if Forefront TMG has been joined to an Enterprise array) and at the Array level. Forefront TMG uses two different models to assign permissions to individual users. Forefront TMG allows the delegation of administrative permissions to individual users to make the administration model more flexible.
0 kommentar(er)
