Understanding Authorization Manager Applications

Applies To: Windows Server 2008

With Authorization Manager, you can provide authorization services to administrators that you support by creating Authorization Manager applications that access authorization stores.

An application is specific to an authorization store, and it is always located directly under its parent authorization store in Authorization Manager.

An authorization store can contain authorization policy information for many applications in a single policy store. All applications in one authorization store can access all of the groups defined at the store level.

An authorization policy store must contain at least one application. For example, you may create one application to control access to a Web site and another application to control access to functions in a particular line-of-business software program. However, since both of these applications are used in the same company, and may have similar requirements, it may make sense to have both applications in one authorization store.

You can control auditing at the application level. For more information, see "Additional references" in this topic.

Additional references

• Understanding Authorization Manager Stores

• Create an Authorization Manager Application

• Understanding Authorization Manager Auditing