Creating a user

Warning

Data model objects: safes, users, servers, accounts and listeners are replicated within the cluster and object instances must not be added on each node. In case the replication mechanism fails to copy objects to other nodes, contact technical support department.

  1. Select Management > Users.
  2. Click Add.
../../_images/users_add.png

Note

Wheel Fudo PAM enables creating users based on the existing definitions. Click desired user to access its configuration parameters and click Copy user to create a new object based on the selected definition.

../../_images/copy_user.png
  1. Enter a unique user login.

Note

The Login field is not case sensitive.

  1. Select the Blocked option to prevent user from accessing servers and resources monitored by Wheel Fudo PAM.
  1. Define account’s validity period.
  2. Select user’s role, which will determine the access rights.

Note

Access rights restrictions also apply to API interface access.

Role Access rights
user
  • Connecting to servers through assigned safes.
  • Loggin to the User Portal (requires adding the user to the portal safe)
  • Fetching servers’ passwords (requires additional access right).
   
service Accessing SNMP information.
   
operator
  • Logging in to the administration panel.
  • Browsing objects: servers, users, safes, listeners, accounts, to which the user has been assigned sufficient access permisions.
  • Blocking/unblocking objects: servers, users, safes, listeners, accounts, to which the user has been assigned sufficient access permisions.
  • Generating reports on demand and subscribing to periodic reports.
  • Activating/deactivating email notifications.
  • Viewing live and archived sessions involving objects (user, safe, account, listener, server), to which the user has been assigned sufficient access permissions.
  • Converting sessions and downloading converted content involving objects (user, safe, account, listener, server), to which the user has been assigned sufficient access permissions.
   
admin
  • Logging in to the administration panel.
  • Managing objects: servers, users, safes, listeners, accounts, to which the user has been assigned sufficient access permisions.
  • Blocking/unblocking objects: servers, users, safes, listeners, accounts, to which the user has been assigned sufficient access permisions.
  • Generating reports on demand and subscribing to periodic reports.
  • Activating/deactivating email notifications.
  • Viewing live and archived sessions involving objects (user, safe, account, listener, server), to which the user has been assigned management privileges.
  • Converting sessions and downloading converted content involving objects (user, safe, account, listener, server), to which the user has been assigned sufficient access permissions.
  • Managing policies.
   
superadmin
  • Full access rights to objects management.
  • Full access rights to system configuration options.
  1. Select user’s preferred language in Wheel Fudo PAM administration panel.
  2. Grant access to safes.
  3. Define time access policy.
  • Click desired safe object.
../../_images/safe_time_policy.png
  • Select Enable time policy option.
  • Click the weekly calendar to define time interval.
../../_images/safe_time_policy_settings.png
  • Click OK.
  1. Enter user’s full name.
  2. Enter user’s email address.
  3. Enter user’s organizational unit.
  4. Enter user’s phone number.
  5. Provide user’s Active Directory domain.
  6. Enter LDAP service BaseDN parameter.

Note

  • LDAP base is necessary for authenticating the user using the Active Directory service.
  • E.g. for example.com domain, the LDAP base parameter value should be dc=example,dc=com.
  1. In the Permissions section, select users allowed to manage this user object.
  2. In the Authentication section, select authentication type.

External authentication

  • Select External authenticaiton from the Type drop-down list.
  • Select external authentication source from the External authentication source drop-down list.

Note

Refer to External authentication topic for more information on external authentication sources.

Password

  • Select Password from the Type drop-down list.
  • Type password in the Password field.
  • Repeat password in the Repeat password field.

SSH key

  • Select SSH key from the Type drop-down list.
  • Click i icon and browse the file system to find the public SSH key used for verifying user’s identity.

One-time password

Warning

One-time passwords are used for implementing AAPM use case scenarios.

  • Select One-time password from the Type drop-down list.
  1. Click Add authentication method to define more authentication methods.

Note

When processing user authentication requests, Wheel Fudo PAM verifies login credentials against defined authentication methods in order in which those methods have been defined.

  1. Click Save.
../../_images/add_user.png

Related topics: