This article applies to:

• Security Reporting Center 2.0
• Security Reporting Center 2.1

Question:

Procedure:

Managing User Access

Because Security Reporting Center can analyze a wide range of information about your enterprise network, it also provides a layered system of user permissions. System and Team Admins can assign varying levels of user access settings to provide useful information sharing while guarding confidential information.

User Rights and Team Rights

User and team rights control two functions: the creation and editing of further users and teams, and access rights to profiles. Rights to each individual profile are assigned in the profile settings, using the appropriate Reporting module.

A user is an individual with access rights to items within Security Reporting Center. When users are created in the Administration module, they have a specific level of access rights to Security Reporting Center objects such as users, teams, and profiles.

Adding Users

Users are added via the Users panel in the Administration module. System Admins can add Users to the global Users list, and Team Admins who do not have System Admin rights can add users to their own teams.

Use the following steps to add a user to the system.

1. On the left pane of Security Reporting Center, click Administration | Users.

2. Click New User. The General panel of the Add User wizard appears.

3. In the Login Name text box, type the name the user will use to log in to Security Reporting Center.

4. In the User Description text box, type the user's actual name or another identifying description.

5. Select the type of password authentication for this user.

   • Click Use System Authentication for this user's password to use the password set for this user in the system.

   • Click Use NetIQ Authentication for this user's password if the user will use the password that you designate on this panel.

6. If you selected NetIQ Authentication, type the user's password in the New Password text box. Re-type the password in the Type Again text box to verify it.

7. Select the Disable this account? check box if you want to prevent this user from accessing any Security Reporting Center resources.

8. Click Next to continue. The Preferences panel is shown.

9. Choose whether to use this system default time zone, or to override it for this user. The default time zone determines when scheduled events run.

   • To use the system default, click Use the system default time zone.

   • To override the system default and assign this user a custom time zone, click Override the system default time zone and select a time zone from the list.

     Note: Regardless of the default you set here, all times are stored as GMT.

10. Specify the period after which user sessions expire for this user.

    • To use the default session timeout interval specified in the Administration options, select Use the system default session timeout value.

    • To specify a different session timeout interval, select Select this user's session timeout value and type an interval from 1 to 9999 minutes in the text box provided. If the user remains inactive for this number of minutes while running the user interface or viewing on-demand reports, the session ends and the user must log in again.

11. Click Next to continue. The Teams panel is shown.

12. Select the teams to which this user belongs. (This step is optional.) To add the user to a team, click Add. The Add Users to Team panel is shown. If no teams have been added yet, no teams appear in the list.

13. Select or de-select teams.

14. Click Done to save your changes, or click Cancel to abandon them. The main Teams panel re-appears.

15. Repeat the previous step to add the user to more teams. To remove the user from a team, select a team name from the list and click Remove.

16. Click Next. The User Rights panel is shown.

17. Click to select the user's rights.

    • Select System Admin to let the user view all events, profiles, users, and teams within the system. System Admins without modification rights can perform account management tasks such as adding, modifying, and deleting users and teams. They may schedule and delete events for all profiles. However, without the rights to change system options, a System Admin cannot delete profiles or change basic operating settings such as licensing, FastTrends database deletion, or scheduler agent polling.

    • Select the In addition, this user will be able to change all system options check box to let the System Admin modify all options and profiles. A System Admin with the ability to change system options can modify any object or setting in the system - for example, she or he can enable and disable agents and change the membership of teams to which he or she does not belong. By default, the admin user created when you install Security Reporting Center is a System Admin with rights to modify all system options.

    • Select User to let the user view reports and schedule events for profiles to which he or she has access.

18. Click Next to continue. A summary of the user settings is shown.

19. Click Save to save your settings. Click Previous to go back and change your settings. Click Cancel to return to the List of Users without adding a user.

This article was previously published as:

NETIQKB13428