understand_user_account
Administration > Account Management > User Accounts
Administrators can use the functions on the User Accounts screen to assign users clearly defined areas of responsibility by restricting their access rights to certain managed products and limiting the actions that they can perform.
When administrators specify which
products a user can access, the administrator is also specifying what
information a user can access from Control Manager. The following information
is affected: component information, logs, product summary information,
security information, and information available for reports and log queries.
Example: Bob and Jane are OfficeScan administrators. Both have
identical account type permissions (they have access to the same menu
items in the web console). However, Jane oversees operations for all OfficeScan
servers. Bob only oversees operations for OfficeScan servers protecting
desktops for the Marketing department. The information that they can view
on the web console will be very different. Bob logs on and only sees information
that is applicable to the OfficeScan servers that his Control Manager
user account allows (the OfficeScan servers for the Marketing department).
When Jane logs on, she sees information for all OfficeScan servers, because
her Control Manager user account grants her access to all OfficeScan servers
registered to Control Manager.
User Access rights determine the controls available to the user in the Product Directory. For example, when you only assign a user the Execute right, then only the options associated with this right appear on the Product Directory.
You can give each user account the following access rights to a product.
|
Control Manager User Account Options |
|
Permission |
Description |
|
Execute |
This right permits the user to run commands on managed products in assigned folders. For example:
|
|
Configure |
This right gives the user access to the configuration consoles of the managed products in the assigned folders. Users with this right can see Configure <managed product> and similar product-specific controls (for example, OfficeScan password configuration features) on their menus. |
|
Edit Directory |
This right permits the user to modify the organization of the managed products/directories the user can access. |
The options that actually appear also depend on the product’s profile. For example, if a product does not have a scanning function, such as eManager, then the Scan Now control does not appear in the Product Tree Tasks menu.
The User Accounts screen displays the following.
|
User Accounts Screen Contents |
|
Account Information |
Description |
|
User ID |
The user name of the account user. |
|
Full name |
The full name of the account user. |
|
Domain |
The Active Directory domain (if any) to which the user belongs. |
|
Account Type |
The account type assigned to the user (example: Administrator). |
|
Enable |
The current status of the account. |
Upon installation, Control Manager automatically creates a root account.
See also: