Vunetrix Manual: System Administration—User Groups

Vunetrix Manual: System Administration—User Groups

To open system administration, select Setup | System Administration from main menu. Click on the tabs to change the different settings.

System Administration Bar

You can define the following aspects of your Vunetrix system setup:

Vunetrix administrator users can change existing user groups or add new ones, and define the users that are member of a certain group.

All the security settings as well as further rights management are conducted via the user groups. This means that group membership controls what a user may do and which objects the user will see when logged in. The actual rights for each object can be defined in an object's settings. There, you can define different rights for each user group.

To change a user group's settings, select it from the list by clicking on the group name.

To add a new user, click on the New User button. The options are the same as for existing users (with slight differences).

To batch-add several users at once in a simple way, please click the Multiple New Users button. In the dialog box appearing, select an existing user group from the drop down menu and enter or paste a list of email addresses. They can be separated by space, comma, semicolon, or a new line. Click the Add button to confirm. For each address, Vunetrix will create a new local user account within the selected user group, carrying the email address as value for Login Name, Username, and Email Address. A new password will be generated automatically and sent to the email address.

To add a new user group, click on the New User Group button. The options are the same as for existing groups (with slight differences).

By default, there aren't any rights set for a newly created Vunetrix user group. Initially, users in this group will not see any objects in the Vunetrix device tree. Please edit your device tree object's settings and set access rights for your newly created user group in the Inherit Access Rights section. Note: The easiest way is to set these rights in the Root Group Settings.

Note: The multi-edit option is not available for the standard user groups Vunetrix Administrators and Vunetrix Users Group.

Note: Predefined objects cannot be deleted!

User Groups Settings

Note: This documentation refers to the Vunetrix System Administrator user accessing the Ajax interface on a master node. For other user accounts, interfaces, or nodes, not all of the options might be available as described. When using a cluster installation, failover nodes are read-only by default.

User Group Settings
User Group Name	Enter a name for the user group.
Administrative Rights	Define if the members of this group will be Vunetrix administrators. If you enable this option, all members of this group will have full access to all monitoring objects, maps, reports, user accounts and user groups, and they can change the Vunetrix monitoring configuration. Choose between: Yes: Give full Vunetrix administrator rights to all members of this group. No: Do not make members of this group administrators. Access to monitoring objects for users that are member of this group will be controlled by the Access Rights settings defined in the Object Settings of Probes, Groups, Devices, or Sensors. Note: This option is especially useful in combination with the Active Directory option below.
Default Homepage	Enter a Vunetrix internal web page. This will set the default homepage for all new users created with this group. A user will be redirected to this page after logging in. This concerns new users either added by an Active Directory login or by the Add multiple users feature.
Use Active Directory	Define if this Vunetrix user group will be connected to a group in your active directory. Choose between: Yes: Connect this group to an AD group. Choose below. For detailed information, please see Active Directory Integration. No: Do not use Active Directory integration for this group, but choose local user accounts instead.
Active Directory Group	If a valid Active Directory Domain is set in the System Administration—System and Website settings and Active Directory integration is enabled above, a drop down menu will appear, showing the groups in your Active Directory. Choose the group whose members will be able to log in to Vunetrix using their Active Directory domain credentials. All of those AD users will be in the security context of the Vunetrix group you're about to create/edit. For detailed information, please see Active Directory Integration. If your Active Directory contains more than 1000 entries in total, Vunetrix will display an input field instead of a drop down menu. This is done due to performance reasons. In the input field, you can enter the group name only. Vunetrix will then add the prefix automatically.
New User Type	If Active Directory integration is enabled above, define the default rights for all new users in this user group. If a user logs in for the first time using Active Directory credentials, Vunetrix will automatically create a new local user account for this user, applying the user type defined here. Choose between: Read/Write User: The user may change settings. Read Only User: The user may not edit any settings. This is a good choice for public or semi-public logins.
Allowed Sensors	Define if members of this user group will be able to create all available sensor types or only specific ones. Choose between: Users may always create all sensor types: No restrictions for group members are applied. Users may create certain sensor types only: Choose the allowed sensor types below. This option is especially interesting for a Managed Service Provider (MSP).
Users May Create These Sensor Types	This field is only visible if you defined that the users in this group are only allowed to create certain sensor types. A list of all available types is shown with their name. Select the desired types by adding check marks in front of the respective lines. You can also select and deselect all items by using the check box in the table head.
Ticket System Access	Define if the members of this user group will be able to use Vunetrix's ticket system. Choose between: Members can use the Ticket System: No restrictions for group members are applied. Members can NOT use the Ticket System: The Tickets option in the main menu bar will not be visible to users in this group.

Members
Members	This setting is available only if Active Directory integration is disabled above. Define which local user accounts will be a member of this group. To add a user account from the list, add a check mark in front of the user name. The user accounts available depend on your setup.

Primary Users
User List	Shows a list of all user accounts with this group set as primary group. This is shown for information purposes only. You can change it in a user account's settings.

Comments

In the Comments tab you can enter free text for each object. This can be used for documentation purposes or to leave information for other users.

History

In the History tab all changes in the settings of an object are logged with a timestamp, the Vunetrix user which conducted the change, and a message. The history log keeps the last 100 entries.

Click on the Continue button to store your settings. If you change tabs or use the main menu, all changes to the settings will be lost!

Setup—Topics

Others

There are some settings that have to be made in the System Administration Tools, available as native Windows applications. For more details, please see sections:

Next Topic

Keywords: Configure,Configure User Group