How to create restricted agent and unrestricted agent .
To create the agent, follow the steps in the Installation and Administration Guide for your agent.
Setting the agent as either restricted or unrestricted happens when you add the agent to the deployment through the Security Console.
You can learn about creating restricted and unrestricted agents through the online help in the RSA Authentication Manager Security Console. Search for Configuring a Restricted Agent to Control User Access for more information.
By default all agents created at first are unrestricted agents.
Once we decide to configure more refined or locked down access to a particular Agent based on user groups, that is when the agent becomes a restricted agent by granting access to user Groups from security console.
The user groups can be - the groups created from within the security console which are locally stored in the internal database (or) the groups that are referenced from an external Identity source such as Microsoft Active Directory whose DN is defined while the Identity source is created from the operations console (Group Base DN)
Retrieving data ...