User management | MediaKind Docs
User management
Manage users
Administrators have rights to create users and assign groups. User groups reflect different user roles with specific permissions. Permissions authorize access to applications, menus and features.
Menu options depend on your processing type and product installation.
User groups
A user group is a set of access rights and permissions. Permissions authorize users to either display or edit configurations. Users are assigned to at least one user group. A user can be assigned to multiple groups.
New users are automatically assigned to the Monitoring group.
User group permissions
There are 3 default user groups. Permissions are either Read (R), Write (W), or Read and Write (R/W). Yes means the user group can carry out the action, but may be limited to specific options.
User group options depend on your processing type and product installation.
| Admin | Configuration | Monitoring | API | |
|---|---|---|---|---|
| Services | R/W | R/W | R | R/W |
| Servers | R/W | R/W | R | R/W |
| Templates | R/W | R/W | R | R/W |
| Failover | R/W | R/W | R | R/W |
| Alarms and Stats | R | R | R | R |
| Settings | R/W | N/A | N/A | R/W |
| Restore | Yes | Yes | No | R/W |
| Backup | Yes | Yes | Yes | R/W |
| User Management | R+W | N/A | N/A | N/A |
Failover default user rights per user group
Admin users have all rights.
Monitoring users can (based on Failover control privilege):
- View groups
- View group details
- View failover audit history
- Trigger manual failover
- Trigger a manual revert
- Trigger a maintenance mode
Configuration users (based on Failover configuration privilege):
- View groups
- View group details
- Trigger manual failover
- Trigger a manual revert
- Trigger a maintenance mode
- Create groups
- Edit groups
- Delete groups
- Edit default failover mode
- Edit timeout period
| Group | Services | Servers | Templates | System Center | Restore | Backup | User Management |
|---|---|---|---|---|---|---|---|
| Admin | R+W | R+W | R+W | R+W | Yes | Yes | R+W |
| Monitoring | R | R | R | N/A | No | Yes | N/A |
| Configuration | R+W | R+W | R+W | N/A | Yes | Yes | N/A |
Display the list of users
- Click '%3e%3cpath%20d='M15.1876%205.73877C15.2529%205.91634%2015.1978%206.11432%2015.057%206.24086L14.1732%207.04502C14.1957%207.21443%2014.2079%207.38791%2014.2079%207.56344C14.2079%207.73897%2014.1957%207.91245%2014.1732%208.08186L15.057%208.88602C15.1978%209.01256%2015.2529%209.21054%2015.1876%209.38811C15.0978%209.63099%2014.9896%209.86366%2014.8651%2010.0882L14.7692%2010.2535C14.6345%2010.478%2014.4835%2010.6903%2014.3181%2010.8903C14.1977%2011.0372%2013.9977%2011.0862%2013.8181%2011.0291L12.6812%2010.6678C12.4078%2010.878%2012.1057%2011.0536%2011.7832%2011.1862L11.5281%2012.3517C11.4873%2012.5374%2011.3444%2012.6843%2011.1566%2012.715C10.875%2012.7619%2010.5851%2012.7864%2010.2892%2012.7864C9.99323%2012.7864%209.70341%2012.7619%209.42175%2012.715C9.23397%2012.6843%209.0911%2012.5374%209.05028%2012.3517L8.79516%2011.1862C8.47267%2011.0536%208.1706%2010.878%207.89711%2010.6678L6.7623%2011.0311C6.58269%2011.0883%206.38267%2011.0372%206.26225%2010.8923C6.09693%2010.6923%205.9459%2010.4801%205.81119%2010.2555L5.71526%2010.0902C5.59076%209.86571%205.48259%209.63303%205.39278%209.39015C5.32747%209.21258%205.38258%209.0146%205.52341%208.88806L6.40717%208.0839C6.38472%207.91245%206.37247%207.73897%206.37247%207.56344C6.37247%207.38791%206.38472%207.21443%206.40717%207.04502L5.52341%206.24086C5.38258%206.11432%205.32747%205.91634%205.39278%205.73877C5.48259%205.49589%205.59076%205.26322%205.71526%205.0387L5.81119%204.87338C5.9459%204.64887%206.09693%204.4366%206.26225%204.23658C6.38267%204.08963%206.58269%204.04065%206.7623%204.0978L7.89915%204.45906C8.17265%204.24883%208.47472%204.0733%208.7972%203.94064L9.05232%202.77522C9.09314%202.58948%209.23601%202.44253%209.42379%202.41192C9.70545%202.36293%209.99527%202.33844%2010.2912%202.33844C10.5872%202.33844%2010.877%202.36293%2011.1587%202.40988C11.3464%202.44049%2011.4893%202.58744%2011.5301%202.77318L11.7852%203.9386C12.1077%204.07126%2012.4098%204.24679%2012.6833%204.45701L13.8201%204.09575C13.9997%204.03861%2014.1998%204.08963%2014.3202%204.23454C14.4855%204.43456%2014.6365%204.64683%2014.7712%204.87134L14.8672%205.03666C14.9917%205.26117%2015.0999%205.49385%2015.1897%205.73673L15.1876%205.73877ZM10.2912%209.19625C10.7243%209.19625%2011.1396%209.02422%2011.4458%208.71801C11.752%208.4118%2011.924%207.99649%2011.924%207.56344C11.924%207.13039%2011.752%206.71508%2011.4458%206.40887C11.1396%206.10266%2010.7243%205.93063%2010.2912%205.93063C9.85817%205.93063%209.44286%206.10266%209.13665%206.40887C8.83044%206.71508%208.65841%207.13039%208.65841%207.56344C8.65841%207.99649%208.83044%208.4118%209.13665%208.71801C9.44286%209.02422%209.85817%209.19625%2010.2912%209.19625Z'%20fill='%23878787'%20fill-opacity='0.9'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_590_373'%3e%3crect%20width='19'%20height='17.5385'%20fill='white'%20transform='translate(0.615479)'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e) in the upper right corner of the window.
- Select User Management. The User Management Administration page displays.
- Select Users.
The list of users displays. You can scroll to the end of the list to display the total number of users.
Add a new group
Select User Management. The User Management Administration page displays.
Select Groups. The list of groups displays. You can scroll to the end of the list to display the total number of groups.
Select Add Group. You are prompted to enter group information.
Enter the Name and define the Permissions for the group, as shown in the example below:
Select a Save option. The new Group appears in the list of groups.
The group permissions for Monitoring, Configuration, Admin and API are listed below (permissions for these groups cannot be modified by the user):
Monitoring: The users with Monitoring access can perform the following actions in the code:
- Access the GUI
- Backup databases
- Manually perform a revert and failover of servers
Configuration: The users with Configuration access can perform the following actions in the code, in addition to the permissions described in the Monitoring group above:
- Restore databases
- Create, edit and delete services
- Create, edit and delete templates
- Create and edit servers
- Modify licenses
- Create, edit and delete failover groups
- Access settings
- Modify SNMP configurations
- Schedule jobs on services
- Edit alarm overrides
- Generate catalogs, outputs and assets
Admin: The users with Admin privileges can perform the following actions in the code, in addition to the permissions described in the Monitoring, Configuration and API groups above (meaning, these users have the rights to perform everything in the system):
- Modify external links and general settings
- Delete licenses and servers
- Reboot Servers
API: The users with API privileges have the right to access the API.
Create a new user
The Controller is a single access point for products. Administrators manage users, groups and permissions from the system center.
Select Add User. You are prompted to enter User information.
Enter the User information.
- Username
- Password
Select a Save option.
Assign a user to a group to manage user access rights and permissions. By default, new users are assigned to the Monitoring group.
An Admin user can edit or create other Admin users and profiles, including passwords and permissions.
Assign a user to a group
Groups are a set of access rights and permissions. Permissions authorize users to either display or edit configurations. Give a user access rights by assigning the user to a group.
Click the user in the list to display user information and permissions.
Scroll to Permissions then use the arrows to add the group to the list of Chosen groups. You can add multiple groups, or click Choose all to assign the user to all available groups.
Click Save.
Link LDAP or Active Directory
The MediaKind Controller can be linked with an external server (LDAP or ActiveDirectory) to identify and authenticate users. If activated, the authentication page displays before granting access to the Home page.
The LDAP connection parameters are defined in a dedicated configuration file. If using LDAP, the MediaKind Controller neither stores nor manages user passwords that are managed by the external LDAP server. Users defined on the external server can coexist with locally defined users.
- See LDAP configuration for LDAP configuration procedures.
- Follow the steps.
When users are first installed from the LDAP or ActiveDirectory server, they are by default, automatically assigned to the Monitoring group. The default group can be configured. Alternatively, LDAP can be configured to assign groups based on LDAP group membership. Administrators can edit user groups to manage permissions and access rights.
Editing user information
Select a User.
Edit the user information:
- Username
- Password
- Personal information
- Permissions
Select a save option to continue or exit.
An Admin user can edit or create other Admin users and profiles, including passwords and permissions.
Edit a user password
Any user can edit their password, but only users with admin or configuration permissions can edit passwords for other users.
Display the list of users in the System Center.
Click the current Admin user from the list to edit.
Click the this form link to change the password.
Edit user profile settings then click Save.
Save options for user management
| Save option | Result |
|---|---|
| Save** | The user is added to the list. |
| Save and continue** | Additional user information displays (groups and permissions). |
| Save and add another | User is added to the list and the add user page is refreshed to add another new user. |