TROUBLESHOOTING

I can't change a subject's access to a target
To modify a subject's privileges to a selected target, you must have Manager access in the directory database ACL, or Editor access and the Administer privilege to the selected target. If you do not have the required access, a subject's privileges are grayed out.

In addition, if Show All is selected next to "People, Servers, Groups" in the "Extended access at: target" dialog box, the list of subjects includes those whose privileges to the selected target are inherited from a higher target with the scope "This container and all descendants" selected. When you select such a subject, the subject's privileges are grayed out. In this case you can change the subject's privileges at the higher target and have the current target inherit the changes. Or you can add the subject to the current target with new privileges that override the inherited privileges at the current target.

See also