Administrative roles

TFM also gives you the ability to associate a set of privileged commands with a role. The privileged commands associated with each role are then associated with people assigned to that role. This saves you having to define an identical set of privileged commands for each user. Instead, you define a role as containing the commands you desire, and then associate each desired user with the role.

The system is delivered without any roles defined. When first setting up a new system, carefully consider what roles, if any, should be defined, and who should be assigned to them. See ``TFM and administrative roles'' following for a specific discussion of roles.

You can administer and access the TFM database with the following three commands:

• The adminrole command can display, add, change, or delete roles in the TFM, and it can associate commands and privileges with each of the roles.

• The adminuser command associates these roles with various administrators or can associate an administrator with individual privileged commands without assigning that administrator to a role directly.

• Administrators and authorized users must use tfadmin to execute commands with privilege.