User and device group access

    User Group Memberships tab Use this tab to select the user groups to which you want to assign a local user. Note Local users cannot be added to remote user groups; remote users cannot be added to any user group, local or remote. This tab lists all local user groups, allowing you to select the groups to which a local user is assigned. Three of those user groups are provided, by default. Note The user will be listed under any user group in the "Users and Device Group Access display's Users tab to which it is assigned in its User Group Memberships tab. Device Administrators: by default, this user group provides Administration Access for monitoring, and No Access for surveillance, at all device groups. Device Viewers: by default, this user group provides View Access for monitoring, and No Access for surveillance, at all device groups. Server Administrators: by default, this user group provides the same access as theData Center ExpertAdministrator user role: full access to all server, monitoring, and surveillance functions. Note You can edit the default names and access privileges for any of these user groups.  

    User Group Members tab Use this tab to select the local users you want to assign to a local user group. Note  Local users cannot be added to remote user groups; remote users cannot be added to any user group, local or remote. Lists all local users, allowing you to select which of those users you want assigned to the user group. Note A user selected in this tab will be listed under the user group in the "Users and Device Group Access" display's Users tab.  

    Define the credentials for a local user only.   Credential Definition Username Identify the name used to log on to the server. Password Type in the password to be used to log on to the server. Verify password Retype the password. Full name (optional) Identify the user's full name. E-mail address (optional for non-Data Center Expert Administrators) Identify the user's email address. Note This address is used to send e-mail to aData Center Expert Administrator for notifications related to the Data Center Expert server itself, and monitored NetBotz Appliances, but not for monitored SNMP or Modbus devices. Description (optional) Identify a role, title, or other attribute that describes the user.  

  Define the Monitoring Access and Surveillance Access you want a user or user group to have for the device group selected in the Device Group Access settings section of the Users tab. The access settings defined for one device group can affect the settings available to other device groups. All settings are available for All Devices, unless another device group has had settings added (check-marked in the Device Group Access settings list): no setting above the highest setting selected at any other group is available for the All Devices group. For example: If a device group has had a setting set to View Access, and no device group has a higher setting selected, only the View Access and No Access settings will be available for the All Devices group. If any device group has had its Monitoring Access set at View and Control Access, Administration Access will be unavailable for that monitoring access for the All Devices group. Note If any group other than Unassigned has had access set at Administration Access, all settings for that monitoring access will be available for the All Devices group. The settings available at other groups depend on the settings defined at their parent group: settings more restrictive than the parent group's settings (All Devices, or the group to which a subgroup is assigned) are unavailable. For example: When All Devices has View Access selected for its Device Access, and View and Tag Access selected for its Surveillance Access, No Access is unavailable for the Monitoring Access at all other groups, and No Access and View Access are unavailable for the Surveillance Access at all other groups. Another factor affects the access set at device groups other than All Devices: you can select an access that is identical to the access a group is inheriting from All Devices, or a parent group. Although the selected group's access settings remain unchanged, those access settings are no longer inherited, and can no longer be affected by changes made to inherited settings. For example, if you select View Access, instead of View Access (Inherited from All Devices), the access selection will not be affected by changes to the All Devices group access selection.  

You use the "Add Authentication Server" or "Edit Authentication Server" wizard to add remote users and user groups that will have access to the console, depending on whether the authentication server that lists those users and user groups is included in the Authentication Servers tab. Note Use the Users tab to edit or delete remote users, and the User Groups tab to edit or delete remote user groups that have access to the Data Center Expert console. In the Authentication Servers tab for the Users and User Groups option, click Add Authentication Server to access the "Add Authentication Server" wizard, or select a listed server and click Edit Authentication Server to access the "Edit Authentication Server" wizard. To delete an authentication server, select that server in the Authentication Servers tab and click Delete. In the OpenLDAP/Active Directory Server Settings display, configure the settings, if necessary, and click Next. In the OpenLDAP/Active Directory Bind Settings display, configure the settings, if necessary, and click Next. Identify a search base to narrow the search scope and decrease directory lookup time at the authentication server. In the Remote Users and User Groups Selection display, select the users and user groups you want to add that will have access to the console.  

Use the "User Group Configuration" display to edit the user role assigned to a remote user group. Note To add a remote user group, use the Authentication Servers tab; to delete a remote user group, select that group in the Users and User Group Details section of the Users tab and click Delete. In the Users and User Group Details section of the Users tab, select a listed remote group and click Edit, to access the "User Group Configuration" display. Note For a remote user group, only the User Roles selections in the User Group Information tab are available. In the User Group Roles section, select the role or roles for the group, if any, and click Apply. Note The Data Center Expert Administrator role provides full access to all server, monitoring, and surveillance functions.  

Add or edit a local user group in the System > Users and Device Group Access > Add User Group option. Note To delete a local user group, select that group in the Users and User Group Details section of the Users tab, and click Delete. In the Users and User Group Details section of the Users tab, click Add User Group to add a local user group, or select a listed local user group and click Edit to access the "User Group Configuration" display. In the User Group Information tab: Define a name for the group. Select the role or roles for the group, if any. Note The Data Center Expert Administrator role provides full access to all server, monitoring, and surveillance functions to any user assigned to the group. In the User Group Members tab, select the local users you want assigned to the group, if any. A user selected in this tab will be listed under the user group in the "Users and Device Group Access" display's Users tab. Note Local users cannot be added to remote user groups; remote users cannot be added to any user group, local or remote.  

Add or edit a local user in the System > Users and Device Group Access option. Note To delete a local user, select that user in the Users and User Group Details section of the Users tab, and click Delete. In the Users and User Group Details section of the Users tab, click Add User to add a local user, or select a listed local user and click Edit User to access the "User Configuration" display. In the User Information tab: In the User Credentials section, define the credentials. E-mail address is optional for non-Data Center Expert Administrators. This address is used to send e-mail to a Data Center Expert Administrator for notifications related to the Data Center Expert server itself, and monitored NetBotz Appliances, but not for monitored SNMP or Modbus devices. In the User Roles section, select the role or roles for the user, if any. Note If you select the Data Center Expert Administrator role, click OK to exit the "User Configuration" display: this role provides full access to all server, monitoring, and surveillance functions; settings in the User Group Memberships and Device Group Privileges tabs will have no affect on the user's privileges. If you want the user disabled, uncheck Enable this User. In the User Group Memberships tab, select the local user groups to which you want the user to belong, if any. Note If you select a user group with Data Center Expert Administrator identified in its Roles column, selecting any other user group will have no affect on user privileges: this user group provides full access to all server, monitoring, and surveillance functions.  

    Device Group Access (Users tab) Use this section in the "Users and Device Group Access" display's Users tab to manage the monitoring and surveillance access you want a user or user group to have at each device group. Note These settings are accessed by selecting the right-click Device Group Access option for any device group in the Device Groups view, or by clicking Device Group Access in the "Users and Device Group Access" display's Users tab. To manage the access settings, select a listed user or user group and click Modify Device Group Access to access the "Device Group Access" display. However, this button is inactive for the following entries: The Unassigned Users group The Remote Users group Note This users group is listed only when at least one authentication server has been added using the Authentication Servers tab. The primary Data Center ExpertAdministrator user (apc, by default). Any user or user group that hasData Center ExpertAdministrator selected for its role. Note You can change this role for any user or user group except the primary Data Center ExpertAdministrator user (apc, by default). Membership in a user group can affect a user's monitoring and surveillance access at the device groups. The settings that provide the least-restrictive access, whether it is the user's or user group's Device Group Access settings, define the access a user has. For example, if a user with No Access for surveillance at a device group belongs to a user group with View and Tag Access for surveillance at that device group, that user has View and Tag Access. Column Description User or User Group Name Lists the user groups, including default (Device Administrators, Device Viewers, Server Administrators, and Unassigned Users) and user-created groups. Users are listed under the user group to which they are assigned (local users not assigned to another group are listed under Unassigned Users; remote users are listed only under Remote Users). Note This column is used in the Users and User Group Details section of the Users tab, as well. Device Group Reports the Monitoring and Surveillance access a selected user or user group has at the device groups. You can edit the access settings for a device group if Modify Device Group Access is enabled for the selected user or user group. Note The All Devices group access settings provide a baseline for all other device groups. The other device groups will use at least the same access settings as All Devices, but any group can be set to use less-restrictive settings. Monitoring Reports the monitoring access a selected user or user group has at the device groups. Surveillance Reports the surveillance access a selected user or user group has at the device groups.  

Five selections are available for user or user group monitoring access at a selected device group.  Note Users assigned the Data Center Expert Administrator role, or assigned to a user group that has this role, have full monitoring and surveillance access, as well as access to all server functions. Monitoring Access Description No Access No monitoring access is provided. View Access - No Camera Images A user with this access setting for a device group can perform the following functions for the devices in that group: View information about active and historical alarms. View information about device sensors. Create a Graph view for a selected sensor type that is associated with the devices. View and export copies of saved reports in a table (as .csv or .txt file) or graph (as .bmp, jpg, or .png file) format. Create and export copies of device sensor reports in a table (as .csv or .txt file) or graph (as .bmp, jpg, or .png file) format. Launch to the web interfaces at the devices. Request that the Data Center Expert server scan a selected SNMP or Modbus device, or set of SNMP and Modbus devices, to update the available information. View Access A user with this access setting for a device group can perform the following functions for the devices in that group: View information about active and historical alarms. View information about device sensors. View NetBotz Appliance camera images. View clips in active and historical alarms. Create a Graph view for a selected sensor type that is associated with the devices. View and export copies of saved reports in a table (as .csv or .txt file) or graph (as .bmp, jpg, or .png file) format. Create and export copies of device sensor reports in a table (as.csv or.txt file) or graph (as .bmp, jpg, or .png file) format. Launch to the web interfaces at the devices. Request that the Data Center Expert server scan a selected SNMP or Modbus device, or set of SNMP and Modbus devices, to update the available information. View and Control Access Users with this access setting for a device group can perform the same monitoring functions View Access provides, as well as the following additional functions: Change the state of a sensor in the right-click menu of the "View Device Sensors" display, when available. Change the state of an outlet in the "Outlet Control" display, when available. Administration Access A user with this access setting at a device group can perform all the same monitoring functions View Access provides, as well as the following additional functions: Create a custom Map View for the device group. Configure NetBotz Appliance Alert Thresholds and SNMP and Modbus Thresholds for device sensors in that group. Configure NetBotz Appliance Configuration options at monitored NetBotz Appliances in that group. Configure the Device Configuration settings for SNMP and Modbus devices in that group. Configure the Device File Transfer Settings. Apply SNMP device and NetBotz Appliance firmware updates that have been downloaded to the Data Center Expert server for the group's devices. Note Only a Data Center Expert Administrator can download the updates to the server.  

Use the Users and User Groups option tab to manage the authentication servers used to add remote users and user groups for the server.   Each authentication server listed in this tab has users and user groups that can be assigned as remote users and user groups at the Data Center Expert server.   Use the Add Authentication Server wizard to add the authentication server to the bab and assign users and groups. Use the Edit Authentication Server wizard to modify settings.   You can select an authentication server to configure the timeout for AD/LDAP up to 300 seconds, 15 seconds by default. When you increase the timeout on this tab, also increase the timeout on the desktop client login screen. Users and user groups will be listed in the Groups and Users folders for the appropriate server or servers in the Authentication Servers tab and in the Users tab.   Note: When a remote user, or a user that belongs to a remote user group, attempts to log in to the Data Center Expert server, the username and password are sent to the authentication server associated with that user. It is that server, and not the Data Center Expert server, that authenticates the log in attempt.  

Use this section in the Users and Device Group Access display Users tab to manage the users and user groups that can access the server. Information about the users and user groups is provided in a table: Column Description User or User Group Name Lists the user groups, including default (Device Administrators, Device Viewers, Server Administrators, and Unassigned Users) and user-created groups. Users are listed under the user group to which they are assigned (local users not assigned to another group are listed under Unassigned Users; remote users are listed only under Remote Users). Note This column is used in the Device Group Access section of the Users tab, as well. Full Name Identifies the full name for a local user only, when defined in its "User Configuration" display. Type Identifies each user or user group by its specific type. Local User Remote User Local User Group Remote User Group Unassigned Users Group Remote Users Group Data Center Expert Administrator Identifies whether a user or user group is assigned the Data Center Expert Administrator role, and, thus, has full access to all server features and functions (Yes or No). You use buttons or right-click options to add new local users or local user groups, and to edit or delete users or user groups, whether local or remote. Note Remote users and user groups are added using the "Users and Device Group Access" display Authentication Servers tab. Add a local user using the "User Configuration" display (Add User button or right-click option). Note You can select right-click and local device group and click Add User to Selected Group to add a new user directly to the selected group (this option is unavailable when a remote user group is selected). Add a local user group using the "User Group Configuration" display (Add User Group button or right-click option). Edit the credentials, user roles, and user group membership for a selected local user using the "User Configuration" display (Edit button or right-click option). Edit the name, user group roles, and user group members for a selected local user group using the "User Group Configuration" display (Edit button or right-click option). Note  You cannot edit the Unassigned Users group, a group that lists local users that are not assigned to another local user group. Edit the user roles for a selected remote user using the "User Configuration" display (Edit button or right-click option). Edit the user group roles for a selected remote user group using the "User Group Configuration" display (Edit button or right-click option). Note You cannot edit the Remote Users group, listed in the table only when at least one authentication server has been added using the Authentication Servers tab. Delete a local or remote user or user group (Delete button or right-click option). Note You cannot delete the Remote Users group, listed in the table only when at least one authentication server has been added, or the Unassigned Users group, which is always listed. Access the Device Group Access section of the Users Tab (Device Group Access button or right-click option).  

  Select the role you want to assign to a local or remote user or user group. Note For a non-Data Center Expert Administrator user, including a user for which no role is selected, access privileges are determined by Device Group Access settings in the Users tab for that user, and for the user groups to which the user is assigned. Role Description Data Center Expert Administrator Full access to all server, monitoring, and surveillance functions for all device groups. Note The Data Center Expert Proxy is included automatically when the Data Center Expert Administrator role is selected. Data Center Expert Proxy Telnet access from the Data Center Expert server's public network to devices on its private network. Provides no access to server, monitoring, or surveillance functions, except as defined by other settings: Local Users: User Group Memberships tab, and Device Group Access settings in the Users tab Remote Users: Device Group Access settings in the Users tab Local or Remote User groups: Device Group Access settings in the Users tab Note Before a Data Center Expert Proxy user can use Telnet to access a private-side device, Telnet must be enabled at that device, and SOCKS Proxy, a Server Access option for Server Administration Settings in the System menu, must be enabled.