Aus der KBASE:
How can you delegate administration of Person and Group documents in the Domino Directory?
Solution
Group Documents: You create a Group document in the Domino Directory and assign one of the users as Group Owner or as Group Administrator. After you save this Group, the user will be able to edit the Group for the purpose of adding/removing members.
NOTE: The user will not be able to edit the Group Owner and Group Administrator fields if they do not have at least Editor access to the Domino Directory. In Notes V3, Group Owners could add other users to the Owner and Administrator fields. In Notes R4, these fields are hard-coded to require Editor access or above in order to modify. Setting the field properties to None has no effect on whether users can change these fields. Even though it may appear that they can make edits, the edits will not remain after exiting the document.
Person Documents: The Owner field by default is set to the user name. The user can only update the following fields in the Person document with Author access to the Domino Directory:
All fields in the Work/Home tab
Basics tab - Internet Password, Generational qualifier, Personal Title
Mail Tab- message formatting, incoming mail encryption
All fields in the Miscellaneous tab
Nothing in Certificates, and nothing in Administration
The user ID, if attached, can be detached
Users cannot modify these fields in another user's Person document, unless the role "user modifier" is checked. All other fields will need at least Editor access to the Domino Directory.
Removing the user name from the Owner Name field will render all fields inaccessible by the user. Some administrators are using this field to "lock down" access to the Person documents while still allowing users enough access to the Domino Directory to be able to access their own Group documents (see above). However, there is a caveat to this method. If a user is renamed, the administration process (AdminP) will add the new user name to the Person document Owner Name field, or change the entry that is already present to the new user name; again, granting the user access to the above fields. This is working as designed. One of the functions of AdminP is to "rename user in person documents".
Note: the Owner/Administrator will be able to edit all fields in Notes versions prior to Notes 4.5.3 and 4.6. Refer to the document titled "Cannot Disable "Must Have Editor Access to Use Field" in Person Form in N&A Book" (#157109 ) for more information about this.
You can also give the user the Group Modifier Role, but note that this will allow the user to edit all Groups in the Domino Directory.
Andreas
