Services are implicitly blocked from access by anyone other than Administrators and Developers. Determine what level of access is required, whether limited to one group of users, all authenticated users, or even unauthenticated users, and apply the appropriate ACL to the service.

If you have secure services, identify users and/or client applications that are authorized to access those services and create groups that contain the authorized members.

If your site uses an external directory (LDAP or central user management), you can configure the server to access the user and group information from the external directory.

For instructions for creating user IDs, see Adding User Accounts. For instruction for creating groups, see Adding Groups. For instructions for using an external directory, see Configuring a Central User Directory or LDAP.

Create the ACLs needed to meet your services' security requirements and assign the groups you have created to these ACLs. For instructions, see Creating ACLs.

Select one or two users who can act as a backup administrator when the primary administrator is unavailable. Use the Users and Groups page to add these users to the “Administrators” group.

For instructions on how to grant a user administrator privileges, see Adding an Administrator User.