add_user_account
Control Manager user accounts allow administrators to specify which products or directories other users can access.
When administrators specify which
products a user can access, the administrator is also specifying what
information a user can access from Control Manager. The following information
is affected: component information, logs, product summary information,
security information, and information available for reports and log queries.
Example: Bob and Jane are OfficeScan administrators. Both have
identical account type permissions (they have access to the same menu
items in the web console). However, Jane oversees operations for all OfficeScan
servers. Bob only oversees operations for OfficeScan servers protecting
desktops for the Marketing department. The information that they can view
on the web console will be very different. Bob logs on and only sees information
that is applicable to the OfficeScan servers that his Control Manager
user account allows (the OfficeScan servers for the Marketing department).
When Jane logs on, she sees information for all OfficeScan servers, because
her Control Manager user account grants her access to all OfficeScan servers
registered to Control Manager.
Add user accounts to do the following:
Allow administrators to specify which products or directories other users can access
Allow other users to log on to the Control Manager web console
Allow administrators to specify the user on the recipient list for notifications
Allow the administrator to add the user to user groups.
Trend Micro suggests configuring account
types and user account settings in the following order:
1. Specify which products/directories the user can access. (Step 8
of Editing a User
Account.)
2. Specify which menu items the user can access. (If the default account
types are not sufficient, see Adding
Account Types or Editing
Account Types)
3. Specify the account type for the user's account. (Step 7 of the
Editing a User
Account.)
When adding a user account, you need to provide information to identify the user, assign an account type, and set folder access rights.
Active Directory users cannot have their accounts disabled from Control Manager. To disable an Active Directory user, you must disable the account from the Active Directory server.
To add a user account:
Administration > Account Management > User Accounts | Add
Navigate to the User Accounts screen.
Click Add. The Step 1: User Information screen appears.
Select Enable this account to enable Control Manager users.
Select the type of user to add:
To add a Trend Micro Control Manager user:
Select Trend Micro Control Manager user.
Provide the following required information to create an account:
User name: The name the user will use to log on to the Control Manager web console. For example, OfficeScan_Admin.
Full name: The full name of the user. For example, John Smith.
Password: You must confirm the password in the field provided. All users can change their log on password on the My Account screen.
The following additional information is optional. All users can also change these settings on the My Account screen.
Email address: The email address to which the user has notifications delivered.
Mobile phone number: The cell phone to which the user has notifications delivered.
Pager number: The pager to which the user has notifications delivered. (Precede the pager number with a 9 and a comma "," [each comma causes a 2 second pause])
MSN Messenger address: The instant messenger address to which the user has notifications delivered.
To add an Active Directory user:
Active Directory users cannot have their accounts disabled from Control Manager. To disable an Active Directory user, you must disable the account from the Active Directory server.
Select Active Directory user.
Provide the following required information to create an account:
User name: The user’s Active Directory identification
Domain: The domain to which the user belongs
User names and domain names can be up to 32 characters in length.
Click Next. The Step 2: Access Control screen appears.
Select an account type from the account type list.
The default options are Operator, Power User, and Administrator, however users can create their own account types.
Select the products or directories the user has access to from Select accessible products/folders.
Carefully organize the Product
Directory for ease of use.
Assigning access to a folder allows users access to all its sub-folders
and managed products.
You can restrict a user to a single managed product.
Select the rights to assign to the user. These rights determine the actions that the user can perform on managed products.
Privileges granted to an account cannot exceed those of the grantor. That means you cannot assign a user access rights that are greater than your own. In addition, if you reduce an account's rights, you also reduce all of its child accounts.
Click Finish.
See also: