AGDLP (original) (raw)
AGDLP (an abbreviation of "account, global, domain local, permission") briefly summarizes Microsoft's recommendations for implementing role-based access controls (RBAC) using nested groups in a native-mode Active Directory (AD) domain: User and computer accounts are members of global groups that represent business roles, which are members of domain local groups that describe resource permissions or user rights assignments. AGUDLP (for "account, global, universal, domain local, permission") and AGLP (for "account, global, local, permission") summarize similar RBAC implementation schemes in Active Directory forests and in Windows NT domains, respectively.
| Property | Value |
|---|---|
| dbo:abstract | AGDLP (an abbreviation of "account, global, domain local, permission") briefly summarizes Microsoft's recommendations for implementing role-based access controls (RBAC) using nested groups in a native-mode Active Directory (AD) domain: User and computer accounts are members of global groups that represent business roles, which are members of domain local groups that describe resource permissions or user rights assignments. AGUDLP (for "account, global, universal, domain local, permission") and AGLP (for "account, global, local, permission") summarize similar RBAC implementation schemes in Active Directory forests and in Windows NT domains, respectively. (en) AGDLP是account, global, domain local, permission的縮寫，簡單說明了微软針對在原生模式Active Directory（AD）中使用嵌套群组（nested group）實現以角色為基礎的存取控制（RBAC）時，相關的建議：使用者和電腦帳號（accounts）依其在企業中的角色，劃分為對應全域（global）群组的成員，全域群组是網域區域群組（domain local groups）的成員，網域區域群組說明資源存取許可（permissions）或是使用者權限設定。AGUDLP（對應account, global, universal, domain local, permission）和 AGLP（對應account, global, local, permission）也是Active Directory和中類似的RBAC實現方式。 (zh) |
| dbo:wikiPageID | 9648603 (xsd:integer) |
| dbo:wikiPageLength | 8265 (xsd:nonNegativeInteger) |
| dbo:wikiPageRevisionID | 1088120107 (xsd:integer) |
| dbo:wikiPageWikiLink | dbc:Windows_administration dbr:Information_technology_security_audit dbr:Path_(computing) dbr:Active_Directory dbr:Database dbr:Directory_service dbr:Security_descriptor dbr:Abbreviation dbr:Microsoft dbr:User_(computing) dbr:Virtual_private_network dbr:Wide_area_network dbr:Role-based_access_control dbr:Share_permissions dbr:Role dbr:Access_control_lists dbr:Windows_Server_domain |
| dbp:wikiPageUsesTemplate | dbt:Reflist |
| dct:subject | dbc:Windows_administration |
| gold:hypernym | dbr:Members |
| rdfs:comment | AGDLP (an abbreviation of "account, global, domain local, permission") briefly summarizes Microsoft's recommendations for implementing role-based access controls (RBAC) using nested groups in a native-mode Active Directory (AD) domain: User and computer accounts are members of global groups that represent business roles, which are members of domain local groups that describe resource permissions or user rights assignments. AGUDLP (for "account, global, universal, domain local, permission") and AGLP (for "account, global, local, permission") summarize similar RBAC implementation schemes in Active Directory forests and in Windows NT domains, respectively. (en) AGDLP是account, global, domain local, permission的縮寫，簡單說明了微软針對在原生模式Active Directory（AD）中使用嵌套群组（nested group）實現以角色為基礎的存取控制（RBAC）時，相關的建議：使用者和電腦帳號（accounts）依其在企業中的角色，劃分為對應全域（global）群组的成員，全域群组是網域區域群組（domain local groups）的成員，網域區域群組說明資源存取許可（permissions）或是使用者權限設定。AGUDLP（對應account, global, universal, domain local, permission）和 AGLP（對應account, global, local, permission）也是Active Directory和中類似的RBAC實現方式。 (zh) |
| rdfs:label | AGDLP (en) AGDLP (zh) |
| owl:sameAs | freebase:AGDLP wikidata:AGDLP dbpedia-zh:AGDLP https://global.dbpedia.org/id/4KDyk |
| prov:wasDerivedFrom | wikipedia-en:AGDLP?oldid=1088120107&ns=0 |
| foaf:isPrimaryTopicOf | wikipedia-en:AGDLP |
| is dbo:wikiPageRedirects of | dbr:AGGDLP dbr:AGLP dbr:AGUDLP |
| is dbo:wikiPageWikiLink of | dbr:Active_Directory dbr:AGGDLP dbr:AGLP dbr:AGUDLP dbr:Microsoft_Windows dbr:Role-based_access_control |
| is foaf:primaryTopic of | wikipedia-en:AGDLP |