4 Users and their settings

In the PVSR application different users can have different access rights. There is always an administrator user in the system whose name is admin. The individual user types are:

• admin user: The user named admin possesses all the rights, but he/she cannot create a private virtual hierarchy and charts. The default password is admin123 at installation. This user cannot be deleted from the system, but it can be locked out and its rights assigned to other users. To achieve this the ADMIN_SUPER_USERS parameter in the CONFIG_INI.pm file must be used to list all the user login names which have admin rights, separated by the colon “:” character

·       Administrators: has the same rights as the admin user, except:

o   Cannot create, modify and delete administrator users

o   Cannot create, modify and delete servers or server groups, cannot view the operating system level user password on some computers

o   Cannot change actual licences used but he can view the licence usage

o   Can set preferences, and create a private virtual hierarchy and charts

·       Restricted administrators: similar to the normal users they can only view those objects that they have received privileges for. However the restricted administrators can also modify these objects if they also have edit rights on them

o   Only those site, equipment, measurement, threshold, threshold type and business hours objects can he modify he has received edit privileges for

o   Only those site, equipment, measurement and threshold objects can he view he has received privileges for

o   He can only modify a user if it was created by himself

o   He can only view an entry in the audit log if the change was made by himself

o   He can only modify a public virtual hierarchy object or a public chart if it was created by himself

o   He cannot modify templates (except the business hours), reports, servers, and events

·       Normal users: cannot modify the base objects in the system, and can view only those objects that they have received privileges for. Moreover, they can set preferences, create private virtual hierarchies and charts, and can modify their own passwords

·       Limited users: Similar to normal users, but they cannot change their passwords, cannot set preferences, and cannot create private virtual hierarchies and charts

In PVSR a user can either have the rights setting on its own or it can belong to a user group. The user groups are technically special users: they cannot log into PVSR but can have access rights which can be inherited by regular users. If a user belongs to a group then its rights cannot be edited because it will have the same rights as its group. If the LDAP authentication is configured then PVSR can synch the group of a user: when the user logs in then it queries its groups and automatically changes the group of the PVSR user if needed.

4.1          Users and user groups. 36

4.2          User rights. 37

4.3          Preferences. 39

4.4          E-mail addresses. 44