If SystemAuth = Yes the user is considered to be an administrator of they are listed in the CVSROOT/admin file or if they are in the 'Administrators' group (Windows) or 'cvsadmin' group (Unix).
If SystemAuth = No only the CVSROOT/admin file is checked.
The CVSROOT/admin file contains a list of usernames who are designated repository administrators, one per line. This file should *not* be put under cvsnt control, as that would be a security risk.
Repository administrators are automatically made members of the group 'admin'.