Object rights

Object rights control what trustees can do with the object of which they are a trustee. Object rights control the object as a single piece in the Directory tree, but do not allow the trustee to access information stored in that object's properties (unless the Supervisor object right is granted).

The following list describes the object rights that you can assign to a trustee:

Supervisor

Gives the network supervisor all rights to the object and to all its properties. However, the Supervisor object right can be blocked by the Inherited Rights Filter (IRF) below the object where the Supervisor right is granted.

Browse

Allows the trustee to see the object in the Directory tree. Also when the trustee searches for a value that matches the object, Browse allows that object to be listed.

Create

Allows the trustee to create a new object within a container object. Applies only to container objects because leaf objects cannot contain other objects.

Delete

Allows the trustee to delete an object from the Directory tree.

Rename

Allows the trustee to change the name of the object, in effect, changing the naming property. This changes what the object is called when it is a part of complete names.