Tripp Lite B097016INT Owners Manual for B093- B097- and B098-Series Console Se - Page 46

4. Serial Port, Host, Device and User Configuration 4.2 Add and Edit Users The Administrator uses this menu selection to set up, edit and delete users, and define the access permissions for each of these users. Users can be authorized to access specified services, serial ports, power devices and specified network-attached hosts. These users can also be given full Administrator status (with full configuration, management and access privileges). To simplify user set up, they can be configured as members of Groups. With firmware V3.5.2 and later, there are six Groups set up by default (earlier versions only had admin and user by default): admin Provides users with unlimited configuration and management privileges. pptpd Group to allow access to the PPTP VPN server. Passwords for users in this group are stored in plain text. dialin Group to allow dial-in access via modems. Passwords for users in this group are stored in plain text. ftp Group to allow ftp access and file access to storage devices. pmshell Group to set default shell to pmshell. users Provides users with basic management privileges. Notes: 1. The admin group provides the admin user with full Administrator privileges. The admin user (Administrator) can access the console server using any of the services enabled in System: Services (e.g., if only HTTPS has been enabled, then the Administrator can only access the console server using HTTPS). However, once logged in, they can reconfigure the console server settings (e.g., to enabled HTTP/telnet for future access). They can also access any of the connected hosts or serial port devices using any of the services enabled for these connections. The Administrator can reconfigure the access services for any host or serial port. Only trusted users should have Administrator access. 2. The user group provides the general user with limited access to the console server, connected hosts and serial devices. These Users can access only the management section of the Management Console menu with no command line access to the console server. They also can only access those hosts and serial devices that have been checked for them. 3. If a user is set up with pptd, dialin, ftp or pmshell group membership, they will have restricted user shell access to the assigned managed devices but will not have any direct access to the console server itself. To add this function, the user must also be a member of the "users" or "admin" groups. 46