Database Reference
In-Depth Information
Then you can change other super administrator passwords and demote them by unchecking their super admin
checkbox (Figure
18-11
).
Figure 18-11.
Super Administrator can demote or change other SA passwords
So if there were seven super administrators, the first one to log on could change eveyone else's password and they
would not be able to gain access, and because there is no forgotten password link on the logon page, this would result
in lockout and having to ask an OS SA to reset the password values from the OS. During this lockout period the one
remaining super admin could initiate what is termed a blackout resulting in all monitoring being turned off for that
period (Figure
18-12
). Knowledge of blackout periods is a sensitive piece of information, and the ability to create a
blackout is a sensitive privilege, as it could hide one's tracks.
