Verdiem Surveyor 6 Administrator Guide

More documents

Recommendations

Info

Verdiem Surveyor 6 Administrator GuideConfiguring permissions for delegated administrationYou can configure different levels of access to the Surveyor deployment. This topic brieflydescribes its role-based security and permissions model.Overview of the role-based security modelSurveyor uses a role-based approach to security, following guidelines of the National Instituteof Standards and Technology RBAC (role based access control) model. In this model:• Roles are created to contain sets of permissions required to access particular administrationtasks.• To grant users access to perform the tasks, you add them to the roles that contain therequired permissions.• The Windows user or group has no direct relationship with the Surveyor task or component.Instead, roles represent business functions, such as Help Desk or Policy Administrator.Using roles for delegated administrationA built-in Root Administrator role gives members of that role complete access to theSurveyor deployment. By default, anyone who has local administrator permissions on theSurveyor server has Root Administrator access level.To set up delegated administration, a member of the Root Administrator role does thefollowing in the Administrator console:• Adds others to the built-in Administrator role by selecting them from Windows users andgroups.• Creates security roles for specific permissions sets.• Configures system-wide or group-level permissions in the roles.• Adds Windows users (or groups) to the roles to apply the role’s permissions sets to thoseusers.Permissions categoriesSecurity roles can include the following categories:• Global (server-wide): Permission to manage a particular area of functionality across theentire Surveyor deployment.• Group level: Permission to perform specified management tasks on selected groups.Security roles can contain global or group permissions or both types. For example, thebuilt-in Policy Administrator role has Manage policies (global) permission by default. Butyou could also grant this role Apply policies permission for specific groups.For information about each setting and determining effective permissions, see Administrativepermissions and descriptions on page 41.Security and permissions in the Surveyor deployment38
Verdiem Surveyor 6 Administrator GuideGrant root administrator permissionsA user or group that has root administrator permissions is granted access to all tasks andgroups in the system.To complete this procedure, you must have local administrator permissions on the Surveyorserver computer.1.In the Administrator console, on the Configure menu , click Roles & Permissions.2. In the list of roles on the Security Permissions page, select Root Administrator.3. On the Users tab, for each Windows user or group that you want to include in the role,click Add User or Group to find and select the user.NOTE: Search operations are limited to the current domain, even if your user account hasaccess to multiple domains. If you specify a different domain, the search returns a “user notfound” message.4. When you’re done adding users to the Root Administrator role, click Save.Search notes• Search operations are limited to the current domain, even if you are logged in as a userwho has access to multiple domains. If you specify a different domain, the search returnsa “user not found” message.• Search results return users and groups that contain the search string you enter, andwildcard characters * and ? are treated as text characters.• Search operations are case-insensitive for finding domain users and case-sensitive forfinding local users. For example:Searching for admin returns• DOMAIN\Admin2 (domain user)• DOMAIN\Administrator (domain user)Searching for Admin returns• DOMAIN\Admin2 (domain user)• DOMAIN\Administrator (domain user)• BUILTIN\Administrators (local group)• Administrator (local user)Security and permissions in the Surveyor deployment39
Page 7 and 8: Copyrights and trademarksCopyright
Page 9 and 10: Chapter 1Introduction to Surveyor 6
Page 11 and 12: Verdiem Surveyor 6 Administrator Gu
Page 31 and 32: Chapter 2Managing administrative gr
Page 37: Chapter 3Security and permissions i
Page 45 and 46: Chapter 4Managing and viewing devic
Page 88 and 89:
Verdiem Surveyor 6 Administrator Gu
Page 90 and 91:
Page 92 and 93:
Page 94 and 95:
Page 96 and 97:
Page 99 and 100:
Page 101 and 102:
Page 103 and 104:
Page 105 and 106:
Page 107 and 108:
Chapter 6Waking up computersThe met
Page 109 and 110:
Page 111 and 112:
Page 113 and 114:
Page 115 and 116:
Page 117 and 118:
Page 119 and 120:
Page 121 and 122:
Page 123 and 124:
Page 125 and 126:
Page 127 and 128:
Page 129 and 130:
Chapter 7Viewing reportsSurveyor re
Page 131 and 132:
Page 133 and 134:
Page 135 and 136:
Page 137 and 138:
Page 139 and 140:
Page 141 and 142:
Page 143 and 144:
Chapter 8Viewing diagnostic informa
Page 145 and 146:
Page 147 and 148:
Page 149 and 150:
Page 151 and 152:
Page 153 and 154:
Page 155 and 156:
Page 157 and 158:
Page 159 and 160:
Chapter 9Using Wake for Remote Acce
Page 161 and 162:
Page 163 and 164:
Page 165 and 166:
Page 167 and 168:
Page 169 and 170:
Page 171 and 172:
Chapter 10TroubleshootingThis secti
Page 173 and 174:
Page 175 and 176:
Page 177 and 178:
Page 179 and 180:
Page 181 and 182:
show all

Verdiem Surveyor 6 Administrator Guide

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?