Start/notes.ini Parameters/RestrictedOperationsList

RestrictedOperationsList

🛠️
Parameter: RestrictedOperationsList
Short description: Defines the users / groups allowed to execute the operations listed in RestrictedOperations.

Profile

Parameter
RestrictedOperationsList
Category
Security / TLS
Component
Server
Available since
9.0.1
Supported versions
9.0.1, 10.0, 11.0, 12.0, 14.0, 14.5, 14.5.1
GUI equivalent
Server document
Possible values
Comma-separated list of group / user names, position-aligned with RestrictedOperations

Description

RestrictedOperationsList is the counterpart to RestrictedOperations: for each operation named there, the same position here holds the user or group list that is allowed to execute it. Using descriptive Domino groups (e.g. ConsoleAdmins, AgentApprovers), permissions can be cleanly encapsulated and maintained in the directory – without having to touch notes.ini on every personnel change.

Example configuration

RestrictedOperations=Console,RestrictedAgent
RestrictedOperationsList=ConsoleAdmins,AgentApprovers

Notes & pitfalls

  • The order must match RestrictedOperations – otherwise the wrong permission list applies.
  • Takes effect after a server restart.
  • Group names are resolved via the Domino Directory; nested groups work.
  • Useful for audits: have group memberships reviewed regularly.