Chapter 16: Managing User Accounts209be used to impersonate another user over the Web Services API or GUI Access API. For more information, see the DSView 3 software SDK online help.NOTE: A service account may only be created if you are using the DSView 3 software internal authentication service.5. To change account expiration settings:. To indicate no expiration date, enable the Never radio button. To specify an expiration date, enable the End of radio button. Then click the button to the right of the adjacent field, and a calendar will be displayed. Select the date when the user account will expire.When a user account expires, it remains in the DSView 3 software system until the account is deleted.6.
Download avocent for free. This is a mirror of the Avocent FTP server. Avocent KVM Downloads: Download KVM Switch Patches, Upgrades, & Manuals from. CCM850 / CCM1650 / CCM4850 with DSView 3 Management Software.
Click Save and then click Close. User group membershipSee User Groups on page 215.To change the group membership of a user:1. Click the Users tab.2. Click on a username. The User Name window will open.3. Click User Groups in the side navigation bar.
The User Group Membership window will open.4. To add a user to one or more groups, select the group(s) in the Available Groups list, then click Add.
The columns will be moved to the Member Of list.5. To remove the user from one or more groups, select the group(s) in the Member Of list, then click Remove.
The groups will be moved to the Available Groups list.6. Click Save and then click Close.The DSView 3 software obtains external group membership and external user information when a user logs in. If a user’s group membership changes or the user is deleted externally, the DSView 3 software will not see those changes until the next time that user logs in. Preemption levelSee Preemption Levels on page 38.To change the preemption level of a user:1. Click the Users tab.2. Click on a username. The User Name window will open.3.
Click Preemption Levels in the side navigation bar. The User Preemption Level window will open.4. Select a preemption level (1-4)from the menu. 210 DSView 3 Software Installer/User Guide5.
Click Save and then click Close. AddressThe user address may be changed only for internal authentication users.To specify address information for a user:1. Click the Users tab.2. Click on a username. The User Name window will open.3.
Click Addresses in the side navigation bar. The User Address Properties window will open.4. Type the home address and business address of the user.5. Click Save and then click Close. Phone contactThe phone contact may be changed only for internal authentication users.To specify phone contact information for a user:1. Click the Users tab.2. Click on a username.
The User Name window will open.3. Click Telephones in the side navigation bar.
The User Telephone Properties window will open.4. Type the home phone number, business phone number, mobile phone number, mobile business phone number and/or pager number of the user.5.
Click Save and then click Close. Email contactEmail contacts may be changed only for internal authentication users.To specify email contact information for user:1. Click the Users tab.2.
In a User Accounts window, click on a username. The User Name window will open.3.
Click E-Mail Addresses in the side navigation bar. The User E-MailProperties window will open.4.
Type the primary email address of the user and up to five additional email addresses.5. Click Save and then click Close. User notesUser notes may be changed only for internal authentication users.To specify notes about a user:1.
Click the Users tab. Chapter 16: Managing User Accounts2112. Click on a username. The User Name window will open.3. Click Notes in the side navigation bar. The User Notes window will open.4. Type any information you wish.5.
Click Save and then click Close. Custom field propertiesYou may specify any information you wish in the six custom fields. Custom field properties may be changed only for internal authentication users.To change the custom fields:1. Click the Users tab.2. Click on a username.3.
Click Custom Fields in the side navigation bar. The User Custom Fields window will open.4.
Type information in the fields.5. Click Save and then click Close. User Access RightsAccess rights indicate whether a user is allowed to perform certain actions on a unit in the DSView 3 software system. See About Access Rights on page 129 for detailed information and a list of actions that can be enabled/disabled for target devices and managed appliances.You may assign access control rights from a user perspective. You select a user account, specify the units for which rights will be assigned, then indicate the permission to perform the action (none, allow, deny or inherit) for each unit.
That procedure is described in this section.There are other ways to assign access rights:. From a user group perspective - see User Group Access Rights on page 220. From a unit perspective - see Unit Access Rights on page 131. From a unit group perspective - see Changing the name, members or access rights of a unit group on page 197To display a user’s access rights:1. Click the Users tab.2. Click on a username. The User Name window will open.3.
Click Effective Rights in the side navigation bar and then click All Units, Target Devices or Appliances. The Target Device Effective Rights or Appliance Effective Rights window will open.
Columns indicate the available actions for the unit. Black check mark - The user has been granted access for this right. Gray check mark - A group to which the user belongs has been granted access for this right.
212 DSView 3 Software Installer/User Guide. Black X - The user has been denied access for this right. Gray X - A group to which the user belongs has been denied access for this right. No check mark - No access has been granted or denied for this right.The access rights display for a target device may contain information that appears invalid. For example, virtual media access can be enabled to a target device that does not support it. Similarly, virtual media access to a target device could be enabled but KVM (Video Viewer) access may be disabled.
See About target device access rights on page 130 formore information.4. Click Close when you are finished reviewing the access rights.
The User Accounts window will open.Customizing Appliance and Target Device Access Rights windowsThe Name field is always displayed in the Target Device Access Rights and Appliance Access Rights windows. The action fields may also be displayed (see About Access Rights on page 129). Use the Customize link to add or remove fields in the display.
See Using the Customize link in windows on page 26.To add or remove access rights through a user account:1. Click the Users tab.2. Click on a username.3.
Click Access Rights in the side navigation bar. The User Access Rights window will open.4.
To add or remove a unit or unit group from the Unit and Unit Groups list, click Edit List. The User Access Rights Unit Selection window will open. To add one or more units/unit groups, select the units/groups in the Available list, then click Add. The units/unit groups will be moved to the List to Update list. To remove one or more units/unit groups, select the units/groups in the List to Update list, then click Remove.
The units/unit groups will be moved to the Available list. (Inherited users and user groups can only be removed from the first unit group that specified any access rights other than inherit.)5. The User Access Rights window will display the current list of units/unit groups.6.
To add/remove access rights for a unit/unit group, select a unit or unit group from the Unit and Unit Groups list, then enable or disable a checkbox in the Access Rights table for each access right. Allow - the access right is allowed for the user. Deny - the access right is denied for the user. Inherit - the access right is inherited from the unit group(s) to which the selected unit/unit group belongs. When Inherit is selected, the Allow and Deny checkboxes will become gray and unchangeable, and indicate the inherited value. If the inherited settings indicated both Allow and Deny, the inherited value is Deny, which takes precedence.
215CHAPTER 17 User GroupsUsers that have been added to the DSView 3 software system may be added to the following two types of user groups:. Built-In- The DSView 3 management software is delivered with six predefined user groups: Appliance Administrators, Auditors, DSView 3 software administrators, Everyone, User Administrators and Users. All users are automatically included in the Everyone user group when they are added to the DSView 3 software system.
Users may be added to any of the other user groups. The privileges that a user has to perform tasks on the DSView 3 software system is dependent on the built-inuser group to which the user is a member. See Built-in User Groups on page 37. User-defined- You may also define custom groups, based on any criteria you wish. For example, you may want to define groups based on user administrators with read-onlyaccess, software developers at a specific location, global network infrastructure personnel based on job title and so on.Built-inuser groups appear in the User Groups - Built-inwindow and user-defineduser groups appear in the User Groups - User Defined window. The Preemption Level column will indicate the preemption level of each user group. The windows may also display the following fields.
Use the Customize link to add or remove fields in the display: See Using the Customize link in windows on page 26. Authentication Server - Name of the authentication server assigned to the user. SeeAuthentication Services on page 73. Role - Role of a user-defineduser group, which may be None, User, Auditor, Appliance Administrator, User Administrator or DSView Administrator. The role column for a built-inuser group or a user-defineduser group with a role of None will be empty. Type - Type of user group, which will be built-inor user-defined.To display user groups:1. Click the Users tab.2.
Click Groups in the top navigation bar. Built-In will automatically be selected in the side navigation bar and the User Groups - Built-inwindow will open.
To display the user-definedgroups, click User-Defined in the side navigation bar. The User Groups - User Defined window will open. Chapter 17: User Groups2173.
The Select Authentication Service window will open. This window lists all authentication services that may be used to authenticate the user group when the user logs in. SeeAuthentication Services on page 73.Click on the name of an authentication service and then click Next. If you selected DSView Internal as the authentication service, go to step 4.
If you selected any other type of authentication service, go to step 5.NOTE: If you are adding a group to the TACACS+ authentication service, see TACACS+ external authentication services on page 217 for more information.4. The Type in Internal Group Name window will open. Type the name for the new user group you wish to create, and then click Next.
User-defineduser group names may contain up to 256 characters. User-defineduser group names are case-preserving.Go to step 7.5. The Specify External Group Name window will open. Click Import Everyone to consider any user on the external authentication server as a member of this user group. Then click Next and go to step 7.
Click Specify a group on external authentication service and type the name of the group in the field. Then click Next and go to step 7.User group names may contain up to 256 non-casesensitive characters. User group names are case-preservingif the user group on the external authentication server is case sensitive. See Group naming in external authentication services on page 216. Click Find a group on external authentication service to browse a list of groups on the external authentication service.
Then click Next and go to step 6.6. The Select Group from External Authentication Service window will open. If the list of groups contains more than 5000 entries, a message will indicate that not all items are displayed.You may filter the list by using the Filter button and the adjacent text field. See Filtering information in a window on page 24.Select one or more groups from the list, then click Next.7. The Select Role window will open. Select a role for the user group(s), then click Next. See Built-in User Groups on page 37 for information about user roles.8.
The Select User Group Preemption Level window will open. Type a preemption level (from 1-4;the higher the number, the higher the preemption level) or select a value from the menu, and then click Next. See Preemption Levels on page 38.9.
The Completed Successful window will open. Click Finish.TACACS+ external authentication servicesTo add a TACACS+ user group:1. Click the Users tab. Click Groups in the top navigation bar. Click User-Defined in the side navigation bar.
The User Groups - User Defined window will open.2. The Add User Group wizard will appear. 218 DSView 3 Software Installer/User Guide3. The Select Authentication Service window will open. This window lists all authentication services that may be used to authenticate the user group when the user logs in. Select an appropriate TACACS+ authentication service from the list.
Click Next.4. If the TACACS+ service you selected is configured to use the privilege level attribute method, the Specify External Group Name window will open and display a list of privilege levels 0-15(the higher the number, the higher the level of access).Select a privilege level from the list. The DSView 3 server will assign a group name based on the privilege level you select. For example, if you choose level 7, the group name will be Privilege Level 7.Click Next.or-If the TACACS+ service you selected is configured to use the group name custom attribute method, the Specify External Group Name window will open and display a Name field. Type the name for the external user group on the external authentication service.
The group name must correspond to one of the values configured in the TACACS+ service.Click Next.5. The Select Role window will open. Select a role for the user group(s), then click Next. See Built-in User Groups on page 37 for information about user roles.6.
The Select User Group Preemption Level window will open. Type a preemption level (from 1-4;the higher the number, the higher the preemption level) or select a value from the menu, and then click Next. See Preemption Levels on page 38.7. The Completed Successful window will open. Click Finish.
Deleting User-definedUser GroupsYou may delete any user-defineduser groups that have been created in the DSView 3 software system. You must have DSView 3 software administrator or user administrator rights to delete user-defineduser groups.To delete a user-defineduser group:1. Click the Users tab. Click Groups in the top navigation bar.
Click User-Defined in the side navigation bar. The User Groups - User Defined window will open.2. Click the checkbox to the left of the user group(s) to be deleted.
To delete all user groups listed in the window, click the checkbox to the left of Name at the top of the list.3. Click Delete. A confirmation dialog box will appear.4.