Notes/Domino 6 and 7 Forum

Full access administrators

Full access administrator is the highest level of administrative access to the server. The full access administrator feature replaces the need to run a Notes client locally on a server. It resolves access control problems -- for example, such as those caused when the only managers of a database ACL have left an organization.

Full access administrators have the following rights:

All the rights as listed for all administrator access levels (see above).

Manager access, with all roles and access privileges enabled, to all databases on the server, regardless of the database ACL settings.

Manager access, with all roles and access privileges enabled, to the Web Administrator database (WEBADMIN.NSF).

Access to all documents in all databases, regardless of Reader names fields.

The ability to create agents that run in unrestricted mode with full administration rights.

Access to any unencrypted data on the server.

Note Full access administrator does not allow access to encrypted data. The use of the specified user's private key is required to decrypt documents that are encrypted with public keys. Similarly, a secret key is required to decrypt documents encrypted with secret keys.

Enabling full access administrator mode

In order to work in full access administrator mode, an administrator must:

Be listed in the Full Access Administrators field in the Administrators section of the Security tab in the Server document. By default, this field is empty.

Enable "Full Access Administration" mode in the Administrator client by selecting Administration - Full Access Administration. If this mode is not enabled, then users will not have full administrator access to the server, even if they are listed as a full access administrator in the Server document. They will instead be granted Administrator rights.

When full access administrator mode is enabled, the client's window title, tab title, and status bar indicate this. This is to remind users that they are accessing the server with the highest level of privilege and should therefore proceed with caution.

If an administrator enables full administration mode in the Administration client, this mode is also enabled for the Domino Designer and for the Lotus Notes clients. Full administrator access is also reflected in their window titles, tab titles, and status bars.

If a user attempts to switch to full access administrator mode, but is not listed as one in the Server document, the user is denied full access and a message appears in the status bar and on the server console. The client will be in full access mode, but that user will not have full administrator access to that particular server. If the user attempts to switch servers, that person's access is checked against the server document of the new server.

Personally i Lik ethe new concept very much and besides that it will be locked once you switch to Full Adminstration Access level. But unfortunately it does not work on the server I like to look at the log.nsf.