The SUP Administrator logical role conveys all administrative rights (that is, anybody in this role is a superuser of Sybase Control Center and can therefore perform all administrative operations).
The SUP Domain Administrator logical role conveys only subset of administrative rights in Sybase Control Center (that is, pertaining only to those SUP domains to which a given subject has been assigned as domain administrator).
Note: The terms Unwired Platform (platform) administrator and domain administrator are used in this document to refer to the user with "SUP Administrator" role and "SUP Domain Administrator" role, respectively.
The SUP Administrator and SUP Domain Administrator logical roles are mapped to specific physical roles in the security repository. These roles may or may not be used for protecting mobile business objects as well.
The domain-level role mappings for these logical roles in the "admin" security configuration in the "default" domain enable the platform administrator or domain administrator access control to Unwired Platform. Both types of administrators are authenticated and authorized by the security provider of the 'admin' security configuration. All administrative and application users and their passwords are managed in the enterprise security repository. Unwired Platform delegates security checks by passing login and password information to the security provider of the "admin" security configuration.
Note: Always create a new security configuration separate from "admin", and always create a different domain besides "default". This action separates the authentication of administration users from device users to unique domains, which is a practice that Sybase strongly recommends.
Sybase Control Center limits feature visibility depending on the role an administrator logs in with. The platform administrator login has access to the full cluster, whereas the domain administrator login can view information pertaining to only the assigned domains.
Only "supAdmin" is the default login for cluster-wide administration. This login is initially assigned both "SUP Administrator" and "SUP Domain Administrator" roles.