3.2. Creating an Organization
Satellite administrators can create new organizations, assign administrators for those organizations, and assign entitlements. Organization administrators can assign groups, systems, and users for their organization. This division allows organizations can perform administrative tasks on their own without affecting other organizations.
Tip
Satellite Administrators should consider reserving the organization 1 Organization Administrator account for themselves to have the option of logging into this organization for various reasons. If your Satellite is configured for PAM authentication, avoid using PAM accounts for the one Satellite administrative organization administrator account in new organizations. Instead, create a Satellite-local account for organization administrators and reserve PAM-authenticated accounts for Satellite logins with less elevated privileges in order to discourage users to frequently log into the Satellite with elevated privileges, as the potential for making mistakes is higher using these accounts.
Additionally, consider creating a login name for the Organization Administrator account that describes (for example, orgadmin-mktg
or eng-dept-admin
), to match admin login names with the organization.