Users

From TBwiki
(Difference between revisions)
Jump to: navigation, search
(Best practices: Using simpler words)
(Security settings (from 2.10 and up): Adding link to the parameters)
 
(One intermediate revision by one user not shown)
Line 28: Line 28:
  
 
=== Best practices ===
 
=== Best practices ===
*Each User needs to be in a User Group. To modify a user's access to a resource, the User Group is modified or a new User Group is created with the appropriate authorization.  
+
*Each User needs to be in a User Group. To modify a user's access to a resource, modify the User Group it belongs to or create a new User Group with the appropriate authorization.  
  
 
*The ''Admin'' User Group is not modifiable, and each User in this group has access to all the resources of the Web Portal.
 
*The ''Admin'' User Group is not modifiable, and each User in this group has access to all the resources of the Web Portal.
Line 40: Line 40:
 
It contains the following options:
 
It contains the following options:
  
*Enable password complexity
+
*[[Parameter:_Enable_password_complexity | Enable password complexity ]]
*Session timeout
+
*[[Parameter:_Session_Timeout | Session Timeout]]
 
+
  
 
== Configuration ==
 
== Configuration ==

Latest revision as of 15:53, 4 November 2016

Users and User Groups are the building blocks of authentication and authorization for Toolpack systems.


The proper implementation of Users and User Groups increases efficiency and reduce costs by:

  • Reducing Human Error,
  • Mitigating Risks,
  • Improving Security,
  • Speeding up and simplifying maintenance and troubleshooting.


Contents

Users

Each person that uses Toolpack Web Portal should be assigned their own user name and password.


User Groups

User Groups define a list of authorized actions applied to each item in the left-hand navigation menu of the Web Portal.

There are 3 authorization levels per resource:

 Read/Write
   Full access to the resource.
 Read
   Only view access to the resource. The action commands will be hidden.
 None
   No access to the resource. It won't be displayed in the left menu.

Best practices

  • Each User needs to be in a User Group. To modify a user's access to a resource, modify the User Group it belongs to or create a new User Group with the appropriate authorization.
  • The Admin User Group is not modifiable, and each User in this group has access to all the resources of the Web Portal.
  • Be careful when creating a User Group that has full authorization to Users. Read/Write Access to users is a security risk because a user can create another user belonging to the Admin user group, thus gaining total access to the web portal.

Security settings (from 2.10 and up)

Security settings regroup all the global settings options available in the Web Portal.

It contains the following options:

Configuration

Tsbc Tmedia/Tsig/Tdev
Personal tools