Users and Groups

Overview

You can create any number of users and user groups for UDMG, and you can assign any user to any user group.

The permissions that you assign to each user and group determine the level of access to UDMG functions.

You can assign any permission to any user or any user group. If you assign a user to a group, the user inherits all permissions assigned to that group.

Default Users and Groups

Default User

The default Universal Controller user is admin. It is granted all permissions and assigned to the default group.

Default Group

The default user group is Generic. It is assigned to the default Business Service and it has no permission by default.

It is assigned to an user when no other user groups are not explicitly assigned or when the last user group assignment is removed.

Adding a User

You must have Write User permissions to add users.

By default, a new user has no permissions. Until permissions are granted, a user can log into the UDMG user interface and view options in the Menu, but cannot perform any tasks.

User Details

The following User Details is for an existing user. See the field descriptions, below, for a description of all fields that display in the User Details.

User Details Field Descriptions

The following table describes the fields, buttons, and tabs that display in the User Details.
 

Field Name

Description

Details

This section contains detailed information about the user.

Username

Log in ID for this user.

Password

Password of this user

Click the Change Password to allow the update of the password value.

Buttons

This section identifies the buttons displayed above and below the User Details that let you perform various actions.

Save

Saves the user record in the database.

New

Displays empty (except for default values) Details for creating a new record.

Delete

Deletes the current record.

Refresh

Refreshes any dynamic data displayed in the Details.

Tabs

This section identifies the tabs across the top of the User Details that provide access to additional information about the user.

Member of Groups

Allows you to assign this user to one or more groups.

Permissions

Allows you to assign permissions to this user.

Adding a User Group

You must have Write User permissions to add groups.

A group is a collection of users. You can assign privileges to groups or users.

Any user assigned to a group inherits permissions assigned to that group.

Group Details

The following Group Details is for an existing group. See the field descriptions, below, for a description of all fields that display in the Group Details.

Group Details Field Descriptions

The following table describes the fields, buttons, and tabs that display in the Group Details.
 

Field Name

Description

Details

This section contains detailed information about the group.

Name

Name of this group.

Description


Description of this record. (Maximum = 1000 characters.)


Business Service

The name of the BusinessService that is linked with the user group. The permission that are defined on the group are applicable only for the records that are assigned to this Business Service.

Buttons

This section identifies the buttons displayed above and below the Group Details that let you perform various actions.

Save

Saves the record in the database.

New

Displays empty (except for default values) Details for creating a new record.

Delete

Deletes the current record.

Refresh

Refreshes any dynamic data displayed in the Details.

Tabs

This section identifies the tabs across the top of the Group Details that provide access to additional information about the user.

Group Members

Allows you to assign users to this group.

Permissions

Allows you to assign permissions to this group.

Assigning Users to Groups

You can assign users to groups from a User record and from a Group record.

Step 1

Open the User or Group record.

Step 2

Click the Group Members (or Member of Groups) tab.
 
For a User, a list of all groups to which the user is assigned displays:
 

 
For a Group, a list of all users assigned to the group displays.


 

Step 3

For a User:

  • Click Edit to display an Edit groups pop-up that allows you to assign the User to existing Groups.

For a Group:

  • Click Edit to display an Edit members pop-up that allows you to assign existing Users to the Group.

Step 4

To assign a User to a Group, move the User/Group from the left window to the right window:

  1. To move a single entry, click it once and then click the > arrow.

  2. To move multiple entries, Ctrl-click them and then click the > arrow.

  3. To move all entries, click the >> arrow.

To unassign the User to a Group, move the User/Group from the right window to the left window:

  1. To move a single entry, click it once and then click the < arrow.

  2. To move multiple entries, Ctrl-click them and then click the < arrow.

  3. To move all entries, click the << arrow.

Step 6

Click Save.

Assigning Permissions to Users or Groups

Permissions control user access to specific types of UDMG records, such as server or partner, and the types of functions that can be performed for those record types, such as create or delete.

You can further narrow down which records each permission with the creation of Business Services and User Group that grant permission to the object in the Business Service.

The user permissions have higher priority, for instance if user has Server Write permission then the user can always update any server without considering any business service or group permission.

This is to avoid user lockout situation. If a user is locked because of complex group permission records, the user can be unlocked by granting the relevant user permission.

To add permissions to a user or group:

Step 1

Open a User or Group record.

Step 2

Click the Permissions tab. A list of permissions assigned to the User / Group displays.
 
For Example:
 


Step 3

Select permissions for the selected user or group.
 
The permissions available differ depending on the Type of permission that you select. Available permissions are Read, Write, and Delete. For Transfers record types, Delete is not available.

Types of Permissions

This section identifies the different types of permissions that you can add to a user or group.

Permission Type

Description

Partners

Handling of Partner records

Rules

Handling of Transfer Rule records

Servers

Handling of local Server records

Transfers

Handling of Transfers:

Read: retrieve status of current or past transfer

Write: Initiate, pause, resume, cancel, retry a transfer

Users

Management of users and access rights

The permission applies to User, Group, and Business Service records

PGP

Handling of PGP Key records