Overview

You can create any number of users and user groups for UDMG, and you can assign any user to any user group.

The permissions that you assign to each user and group determine the level of access to UDMG functions.

You can assign any permission to any user or any user group. If you assign a user to a group, the user inherits all permissions assigned to that group.

Default Users and Groups

Default User

The default Universal Controller user is admin. It is granted all permissions and assigned to the default group.

Default Group

The default user group is Generic. It is assigned to the default Business Service and it has no permission by default.

It is assigned to an user when no other user groups are not explicitly assigned or when the last user group assignment is removed.

Adding a User

You must have Write User permissions to add users.

By default, a new user has no permissions. Until permissions are granted, a user can log into the UDMG user interface and view options in the Menu, but cannot perform any tasks.

User Details

The following User Details is for an existing user. See the field descriptions, below, for a description of all fields that display in the User Details.

User Details Field Descriptions

The following table describes the fields, buttons, and tabs that display in the User Details.

Field Name	Description
Details	This section contains detailed information about the user.
Username	Log in ID for this user.
Password	Password of this user Click the Change Password to allow the update of the password value.
Buttons	This section identifies the buttons displayed above and below the User Details that let you perform various actions.
Save	Saves the user record in the database.
New	Displays empty (except for default values) Details for creating a new record.
Delete	Deletes the current record.
Refresh	Refreshes any dynamic data displayed in the Details.
Tabs	This section identifies the tabs across the top of the User Details that provide access to additional information about the user.
Member of Groups	Allows you to assign this user to one or more groups.
Permissions	Allows you to assign permissions to this user.

Adding a User Group

You must have Write User permissions to add groups.

A group is a collection of users. You can assign privileges to groups or users.

Any user assigned to a group inherits permissions assigned to that group.

Group Details

The following Group Details is for an existing group. See the field descriptions, below, for a description of all fields that display in the Group Details.

Group Details Field Descriptions

The following table describes the fields, buttons, and tabs that display in the Group Details.

Field Name	Description
Details	This section contains detailed information about the group.
Name	Name of this group.
Description	Description of this record. (Maximum = 1000 characters.)
Business Service	The name of the Business Service that is linked with the user group. The permission that are defined on the group are applicable only for the records that are assigned to this Business Service.
Buttons	This section identifies the buttons displayed above and below the Group Details that let you perform various actions.
Save	Saves the record in the database.
New	Displays empty (except for default values) Details for creating a new record.
Delete	Deletes the current record.
Refresh	Refreshes any dynamic data displayed in the Details.
Tabs	This section identifies the tabs across the top of the Group Details that provide access to additional information about the user.
Group Members	Allows you to assign users to this group.
Permissions	Allows you to assign permissions to this group.

Assigning Users to Groups

You can assign users to groups from a User record and from a Group record.

Step 1	Open the User or Group record.
Step 2	Click the Group Members (or Member of Groups) tab. For a User, a list of all groups to which the user is assigned displays: For a Group, a list of all users assigned to the group displays.
Step 3	For a User: Click Edit to display an Edit groups pop-up that allows you to assign the User to existing Groups. For a Group: Click Edit to display an Edit members pop-up that allows you to assign existing Users to the Group.
Step 4	To assign a User to a Group, move the User/Group from the left window to the right window: To move a single entry, click it once and then click the > arrow. To move multiple entries, Ctrl-click them and then click the > arrow. To move all entries, click the >> arrow. To unassign the User to a Group, move the User/Group from the right window to the left window: To move a single entry, click it once and then click the < arrow. To move multiple entries, Ctrl-click them and then click the < arrow. To move all entries, click the << arrow.
Step 6	Click Save.

Assigning Permissions to Users or Groups

Permissions control user access to specific types of UDMG records, such as server or partner, and the types of functions that can be performed for those record types, such as create or delete.

You can further narrow down which records each permission with the creation of Business Services and User Group that grant permission to the object in the Business Service.

The user permissions have higher priority, for instance if user has Server Write permission then the user can always update any server without considering any business service or group permission.

This is to avoid user lockout situation. If a user is locked because of complex group permission records, the user can be unlocked by granting the relevant user permission.

To add permissions to a user or group:

Step 1	Open a User or Group record.
Step 2	Click the Permissions tab. A list of permissions assigned to the User / Group displays. For Example, for a user record: for a user group record:
Step 3	Select permissions for the selected user or group. The permissions available differ depending on the Type of permission that you select. Available permissions are Read, Write, and Delete. For Transfers record types, Delete is not available.

Types of Permissions

This section identifies the different types of permissions that you can add to a user or group.

Permission Type	Description
Partners	Handling of Partner records
Rules	Handling of Transfer Rule records
Servers	Handling of local Server records
Transfers	Handling of Transfers: Read: retrieve status of current or past transfer Write: Initiate, pause, resume, cancel, retry a transfer
Users	Management of users and access rights The permission applies for handling User, Group, and Business Service records
PGP	Handling of PGP Key records
Administration	System Administration