Running Restricted LotusScript/Java Agents

Running Restricted LotusScript/Java Agents

The given user accounts and groups can run certain LotusScript and Java agents on the server. If no user accounts or groups are assigned, nobody can run these agents on the server.

To allow user accounts to run restricted LotusScript/Java agents

1. Select the category IBM Notes | Notes server.
2. Select the server in the result list.
3. Select Run restricted LotusScript/Java agents in the task view.
4. Select the table "Notes user accounts" in Table.
5. Assign user accounts in Add assignments.

   - OR -

   Remove user accounts in Remove assignments.

6. Save the changes.

To allow groups to run restricted LotusScript/Java agents

1. Select the category IBM Notes | Notes server.
2. Select the server in the result list.
3. Select Run restricted LotusScript/Java agents in the task view.
4. Select the table "Notes groups" in Table.
5. Assign groups in Add assignments.

   - OR -

   Remove groups in Remove assignments.

6. Save the changes.

Related Topics

• Signing or Running Unrestricted Methods and Operations

Running Simple Agents and Formula Agents

Running Simple Agents and Formula Agents

The given user accounts and groups can run simple agents and formula agents on the server (private as well as common). If no user accounts or groups are assigned, all user accounts and groups can run these agents.

To allow user accounts to run simple agents and formula agents

1. Select the category IBM Notes | Notes server.
2. Select the server in the result list.
3. Select Run simple and formula agents in the task view.
4. Select the table "Notes user accounts" in Table.
5. Assign user accounts in Add assignments.

   - OR -

   Remove user accounts in Remove assignments.

6. Save the changes.

To allow groups to run simple agents and formula agents

1. Select the category IBM Notes | Notes server.
2. Select the server in the result list.
3. Select Run simple and formula agents in the task view.
4. Select the table "Notes groups" in Table.
5. Assign groups in Add assignments.

   - OR -

   Remove groups in Remove assignments.

6. Save the changes.

Related Topics

• Signing or Running Unrestricted Methods and Operations

Using AdminP Requests for Handling IBM Notes Processes

Using AdminP Requests for Handling IBM Notes Processes

IBM Notes contains an asynchronous mechanism for processing various internal tasks. For example, if the name of a user changes, this mechanism ensures that the access control list from the Notes database is also modified.

The request is processed by the Notes server task "AdminP" that runs on every Notes server. This task checks at set intervals whether there are new requests pending that require handling. These are placed in the Notes database admin4.nsf in the form of request documents and then replicated on every Notes server. After a request has been processed, the executing Notes server creates a response document and if necessary a follow-up request.

AdminP requests are used by certain One Identity Manager processes, for example, to change parts of a users name, exchanging certificates or when restoring a user ID.

Several factors are involved in determining when these will be processed:

• When was the request replicated on the executing Notes server?
• How often does the AdminP server task run on the executing Notes server?
• Which type of request is it?

Automatic Confirmation of AdminP Requests

Automatic Confirmation of AdminP Requests

Certain AdminP requests have to be confirmed first by the administrator before they can be run. It is possible to confirm them automatically with the One Identity Manager. Prerequisite for this is regular synchronization of the Admin4 database.

To confirm pending AdminP requests regularly

• Configure and set the schedule "IBM Notes automatic AdminP request confirmation" in the Designer.
  

For more detailed information about editing schedules, see the One Identity Manager Configuration Guide.

Confirmation of the following requests has currently been implemented:

• Approve MailfileDeletion
• Approve MovedReplicaDeletion
• Approve ReplicaDeletion