Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

You can create any number of users and user groups for UDMG , and you can assign any user to any user group.

The permissions that you assign assigned to each user and group determine the level of access to UDMG functions.

...

Default Users and Groups

Default User

The default Universal Controller user is admin. It is granted all permissions and assigned to the default group.

...

The default user group is Generic. It is assigned to the default Business Service , and it has no permission by default.

...


Note

You must have Write User permissions to add users.

By default, a new user has no permissions. Until permissions are granted, a user users can log into the UDMG user interface and view options in the Menu but cannot perform any tasks.

...

The following User Details is are for an existing user. See the field descriptions , below , for a description of all fields that display the fields displayed in the User Details.Image Removed

Image Added

User Details Field Descriptions

The following table describes the fields, buttons, and tabs that display displayed in the User Details.
 

this user to one or more groups.Permissions

Field Name

Description

Details

The section contains detailed information about the user.

Username

Log in ID for this the user.

Password

Password of this the user.


Note

Click the Change Password checkbox to update the password value.


ButtonsIcons

The section identifies the buttons icons displayed above and below the User Details that let you perform various actions.

Save (Image Added)

Saves the User record in the database.

New (Image Added)

Displays empty (except for default values) User Details for creating a new record.

Delete (Image Added)

Deletes the current record.

Refresh (Image Added)

Refreshes any dynamic data displayed in the User Details.

Tabs

The section identifies the tabs across the top of the User Details that provide access to additional information about the user.Member of Groups

UserEnter and display the username and password. 

Permissions

Allows you to assign permissions to the user.

Member of Group

Allows you to assign permissions to this userthe user to one or more groups.

Adding a User Group


Note

You must have Write User permissions to add groups.

A group is a collection of users. You can assign privileges/permissions to groups or users.

...

The following Group Details is are for an existing group. See the field descriptions , below , for a description of all fields that display the fields displayed in the Group Details.Image Removed

Image Added

Group Details Field Descriptions

The following table describes the fields, buttons, and tabs that display displayed in the Group Details.
 

Members users this

Field Name

Description

Details

The section contains detailed information about the group.

Name

Name of this the group.

Description

Description of this the record. It can contain a maximum of 1,000 characters.

Business Service

The name of the Business Service that is linked with to the user group. The permissions that are defined for the group are applicable apply only for to the records that are assigned to the Business Service.

ButtonsIcons

The section identifies the buttons icons displayed above and below the Group Details that let you perform various actions.

Save (Image Added)

Saves the record in the database.

New (Image Added)

Displays empty (except for default values) Group Details for creating a new record.

Delete (Image Added)

Deletes the current record.

Refresh (Image Added)

Refreshes any dynamic data displayed in the Group Details.

Tabs

The section identifies the tabs across the top of the Group Details that provide access to additional information about the usergroup.

GroupEnter and display the group name and description. 
PermissionsAllows you to assign permissions to the group.

PermissionsGroup Members

Allows you to assign permissions users to this the group.

Assigning Users to Groups

...

Step 1

Open the User or Group record.

Step 2

Click the Group Members (or Member of GroupsGroup) tab.
 
For a user, a list of all groups to which the user is assigned displays:
 Image RemovedImage Added

 
For a group, a list of all users assigned to the group displays.:

Image RemovedImage Added
 

Step 3

For a user:

  • Click Pencil icon (Edit to ) to display an Edit groupsGroups pop-up that allows you to assign the user to existing groups.

Image RemovedImage Added

For a group:

  • Click Pencil icon (Edit) to display an Edit membersMembers pop-up that allows you to assign existing users to the group.

Image RemovedImage Added

Step 4

To assign a user to a group, move the user/group from the left window to the right window:

  1. To move a single entry, click it once and then click the > arrow.

  2. To move multiple entries, Ctrl-click them and then click the > arrow.

  3. To move all entries, click the >> arrow.

To unassign the user to a group, move the user/group from the right window to the left window:

  1. To move a single entry, click it once and then click the < arrow.

  2. To move multiple entries, Ctrl-click them and then click the < arrow.

  3. To move all entries, click the << arrow.

Step 6

Click Save changes.

Assigning Permissions to Users or Groups

Permissions control user access to specific types of UDMG records, such as server or partner, and the types of functions that can be performed for those record types, such as Create or Delete.

You can further narrow down which records each permission permissions are applied to each record with the creation of a Business Services Service and/or User Group that grant permission . The User Group grants permissions to the object in the Business Service. – this sentence is confusing - You can further narrow down which records get permissions with the creation of BS/G or you can further narrow down which permissions are assigned to each record with the creation... 

Note

The user permissions have higher the highest priority. For instance, if a user has Server Write permissions, then the user can always update any server without considering any Business Service or User Group permission.

This is to avoid a user lockout situation. If a user is locked out because of complex group permission records, the user can be unlocked by granting the relevant user permission.

...

Step 1

Open a User or Group record.

Step 2

Click the Permissions tab. A list of permissions assigned to the user / group displays.
 
For example, for a User record:
 Image Modified

For example, for a Group record:

Image RemovedImage Added


Step 3

Select permissions for the selected user or group using the toggles.
 
The permissions available differ depending on the Type of permission that you select.
Available permissions are Read, Write, and Delete.


For Transfers record types, Delete is not available.

...

This section identifies the different types of permissions that you can add be added to a user or group.

Permission Type

Description

servers

Handling of local Server records.

sharedAccountsHandling of Shared Accounts records.
partnersHandling of Partner records.
rulesHandling of Transfer Rule records.

transfers

Handling of Transfers:

Read: retrieve status of current or past transfer.

Write: Initiate, pause, resume, cancel, or retry a transfer.

users

Management of users and access rights.


Note

The permission applies for handling User, Group, and Business Service records.


pgp

Handling of PGP Key records.

administrationSystem Administration.
auditHandling of audit records.