Administrators interact with Unwired Platform primarily to configure it and ensure the production environment works efficiently as a result of that configuration.
Unwired Platform administrators can be one of two types: platform administrators or domain administrators. The platform administrator has cluster-wide administration access to the Unwired Platform, while the domain administrator has access to the specific domains that the cluster-wide administrator assigns. The "SUP Administrator" and "SUP Domain Administrator" logical roles are mapped to specific physical roles in the security repository and used to implement access control and delegate privileges for the platform administrator and domain administration respectively. These roles may or may not be used for protecting mobile business objects as well.
The domain-level role mappings for the aforementioned logical roles in the 'admin' security configuration in the 'default' domain enable the platform adminstrator or domain administrator access control to Unwired Platform. Both types of administrators are authenticated and authorized by the security provider of the 'admin' security configuration. All administrative and application users and their passwords are managed in the security repository. Unwired Platform delegates security checks by passing login and password information to the security provider of the 'admin' security configuration.
Sybase Control Center limits feature visibility depending on the role an administrator logs in with. The platform administrator login has access to the full cluster, whereas the domain administrator login can view information pertaining to only the assigned domains.
"supAdmin" is the default login for cluster-wide administration and "supDomainAdmin" is the default login for domain administration. These logins are assigned "SUP Administrator" and "SUP Domain Administrator" roles, respectively, in the OpenDS LDAP server (Developer Edition). When setting up Deployment Edition security, the administrator specifies physical role mappings for the "SUP Administrator" and "SUP Domain Administrator" logical roles. Once this is configured, only logins with the required physical roles will have access to Unwired Server as either a platform administrator or domain administrator.