Differences

This shows you the differences between two versions of the page.

--- master:user [2017/07/17 16:34] – [Identity] dcumming
+++ master:user [2025/01/21 22:07] (current) – external edit 127.0.0.1
@@ Line 1: / Line 1: @@
 ====== Adding and Updating User Information =======
-====== Overview ======
+To be able to login to a TapeTrack Framework Server, you must have a [[object:user|User-ID]] and password.
+This section describes how to create a new User-ID and set Attributes for that User-ID.
-The User Administration is the main maintenance terminal for managing Users.
 ===== Group/User Administration =====
-On the ''Administration'' drop down menu in TapeTrack TapeMaster select ''Group/User Administration''.
+From the main menu select ''Administration'' -> ''Group/User Administration''.
-{{:master:tapemaster_user.png}}
+<note tip>If the menu option **Administration** is greyed out and inaccessible, you do not have sufficient privileges (tapemaster rights) to add Users</note>
+{{menu_admin_group_user_admin.gif}}
 To add a new User, right-click in the white space on the User Administration screen and select ''Add''.
-{{:master:tapemaster_user_add.png}}
+{{menu_admin_group_user_admin_add.gif}}
-To update an existing User, double-click on that User or right-click and select "Properties".
+To update an existing User, double-click on that User or right-click and select ''Properties''.
-The ''Add New User'' window will display six tabs:
+The ''Add New User'' window will display three tabs:
   * [[#Identity]]
-  * [[#Group]]
   * [[#IP Ranges]]
   * [[#Access]]
-  * [[#Options]]
-  * [[#Defaults]]
 ===== Identity =====
-The ''Identity'' tab provides fields to update the ''User-ID'' and ''Name''.
-  * User ID: The User ID will be the user name that the user uses to login to TapeTrack products.
-  * Name: The name is the User's desired display name.
-{{:master:tapemaster_user_add_identity.png}}
-===== Group =====
+{{menu_admin_group_user_admin_add_identity.png}}
-The ''Group'' tab is where a User is added to a group depending on their role.
-  * Group: Associates the selected User with a Group.
+The ''Identity'' tab provides fields to update the:
-  * Role: Sets the Role for the User.
+  * **Identity**
-{{:master:tapemaster_user_add_group.png}}
+    * **User-ID**: The User-ID will be the user name that the user uses to login to TapeTrack products.
+    * **Name**: The name is the User's desired display name.
+  * **Group**
+    * **Group-ID**: Select group to assign user to from the drop-down list or [[master:create_group|add new group]].
+    * **Role**: Hierarchical role of the User.
+  * **Options**
+    * **Administrative rights**: When set to ''True'' the User will have Administration Rights with Server Administrator privileges or the ability to Add/Delete Customers and Media Types.
+    * **Scan-In Only**: When set to ''True'' the User will only be able to Scan tapes into the system.
+    * **Disabled**: When set to ''True'' the User's access will be in a disabled status, so that they are not able to access any TapeTrack products. This does not delete the User.
+    * **No Scanner**: When set to ''True'' the Barcode Scanning Window will provide an auto-complete drop-down.
+    * **No Time-Out**: By default, all User's are logged out of TapeMaster after ten minutes of inactivity. Setting this to ''True'', the selected User will not time out.
+    * **tapemaster rights**: When set to ''True'', it allows the User to gain the same administrative rights as the tapemaster superuser account. Only the User-ID tapemaster can add tapemaster rights to another user.
+    * **Allow access inheritance**: Allows User to inherit another User's access rights using variable [[variable:tmssuserinherit|TMSSUSERINHERIT]] with [[cli:introduction|Command Line Utility]] Programs
+    * **Certify**: Assigns the ability to [[master:generate_certificate|generate certificates]].
+    * **AD Domain**: This is required if the User logs on to TapeTrack with their Active Directory Username and Password.
+    * **Require AD Group**: When set to ''True'', the User must use their [[https://en.wikipedia.org/wiki/Active_Directory|Active Directory]] credentials to logon.
+  * **Client Access**
+    * **TapeMaster**: Authorizes User-ID access to TapeMaster
+    * **Lite**: Authorizes User-ID access to Lite
+    * **Checkpoint**: Authorizes User-ID access to Checkpoint
+    * **Sync**: Authorizes User-ID access to Sync software.
+  * **Details**
+    * **Email Address**: Allows inclusion of user email, which may be used instead of username to log into TapeTrack directly (ie not using Active Directory)
+    * **Description**: Add description to User-ID.
+  * **Defaults**
+    * **Customer-ID**: Sets Customer-ID for User in Scan-In window.  Once Customer-ID is set, Media-ID field will be displayed.
+    * **Media-ID**: Sets Media-ID for User in Scan-In window.
+  * **One-Time-Password**
+    * **Enabled**: Enables the use of 2FA or One time password for login.
+    * **Activated**: Shows if 2FA or One time password is activated. Activated only displays if Enabled is set to True.
+<note important>If using windows Active Domain to log into TapeTrack, the username must match your AD username</note>
 ===== IP Ranges =====
-The ''IP Ranges'' tab sets restrictions on which IP addresses a User can access the TapeTrack Server from. To add or delete, right-click the window. Global Access will allow access from any IP.
+The ''IP Ranges'' tab sets restrictions on which IP addresses a User can access the TapeTrack Server from.
-{{:master:tapemaster_user_add_identity.png}}
+If setting IP's, ensure Users have a static IP address so they are not denied access if trying to access from a dynamic address such as using a remote or home connection.
-===== Access =====
+{{menu_admin_group_user_admin_add_ipranges.gif}}
-The ''Access'' tab sets permissions for which Customers the selected User can access and how that User can interact with Volumes in the selected Customer.
-{{:master:tapemaster_user_add_identity.png}}
+To add or delete, right-click the window and select from the menu.
-  * Customer ID: Enter the Customer-ID for the Customer that the User should have access to.
-   * Read: Allows the User to view but not update Volumes in the above Customer. Must be enabled for the User to be able to view Volumes in the Customer.
-   * Write: Allows the User to perform basic operations for Volumes in a Customer.
-   * Alter: Allows the User to Add and Delete Volumes to the selected Customer.
-Click ''Add'' and then ''Save''.
-===== Options =====
+Global Access (0.0.0.0) will allow access from any IP, this value will need to be removed if added a restricted IP list as all values in the list are valid.
-The ''Options'' tab has 3 sections to provide access to additional features of the software.
-{{:master:tapemaster_user_add_options.png}}
-==== Options ====
-In the ''Options'' section is where you can select ''True'' or ''False'' to give that User access to that feature.
-   * Administration Rights: When set to ''True'' the User will have Administration Rights with Server Administrator privileges or the ability to Add or Delete Customers and Add or Delete Media Types.
+===== Access =====
-   * Scan-In Only: When set to ''True'' the User will only be able to Scan tapes into the system.
+The ''Access'' tab sets permissions for which Customers the selected User can access and how that User can interact with Volumes in the selected Customer.
-   * Disabled: When set to ''True'' the User' access will be in a disabled status, so that they are not able to access any TapeTrack products. This does not delete the User.
-   * No Scanner: When set to ''True'' the Barcode Scanning Window will provide an auto-complete drop-down.
-   * No Time-Out: By default, all User's are logged out of TapeMaster after ten minutes of inactivity. Setting this to ''True'', the selected User will not time out.
-   * tapemaster rights: When set to ''True'', it allows the User to gain the same administrative rights as the tapemaster superuser account.
-   * AD Domain: This is required if the User logs on to TapeTrack with their Active Directory Username and Password.
-   * Require AD Group: When set to ''True'', the User must use their Active Directory credentials.
+{{menu_admin_group_user_admin_add_access.gif}}
-==== Client Access ====
+  * **Customer-ID**: Enter the Customer-ID for the Customer that the User should have access to.
+      * US01 will give access to US01 only
+      * US*  will give access to all customers starting with US
+      * * will give access to all customers
+   * **Read**: Allows the User to view but not update Volumes in the above Customer. Must be enabled for the User to be able to view Volumes in the selected Customer-ID.
+   * **Write**: Allows the User to perform basic operations for Volumes to the selected Customer.
+   * **Alter**: Allows the User to Add and Delete Media and Volumes to the selected Customer.
+   * **Catalog**: Allows User to access Catalog information on the selected Customer.
-  * When any of the ''Client Access'' are set to ''True'', it allows the User to have access to the TapeTrack software that is selected.
+For each Customer access, click ''Add'' to commit the data.  Predicted access rights will then be displayed in the lower window.
-==== Details ====
+Once all data has been entered, click ''Save'' to create User.
-  * Allows inclusion of user email
+[[:troubleshooting:add_user|Troubleshooting: Add user errors]]
-==== Defaults ====
-The ''Defaults'' tab sets a User's default Customer and Media Type for Barcode scanning. These defaults can be changed in the Barcode Scanning Window at any point.
-{{:master:tapemaster_user_add_defaults.png}}
-Once all information click ''Save'' to create new user
+<- master:set_password|Setting a password^ master:starting|Getting Started ^ master:customer|Creating a new Customer->