TapeTrack Documentation

Because there is more to tape management than you ever realized

User Tools

Site Tools

Trace:
master:user

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

master:user [2018/08/24 03:09] – [Adding and Updating User Information] Scott Cunliffemaster:user [2025/01/21 22:07] (current) – external edit 127.0.0.1
Line 3: Line 3:
 To be able to login to a TapeTrack Framework Server, you must have a [[object:user|User-ID]] and password. To be able to login to a TapeTrack Framework Server, you must have a [[object:user|User-ID]] and password.
  
-This section describes how to add a new User-ID and set attributes for that User-ID.+This section describes how to create a new User-ID and set Attributes for that User-ID.
  
  
 ===== Group/User Administration ===== ===== Group/User Administration =====
  
-On the ''Administration'' drop-down menu in TapeTrack TapeMaster select ''Group/User Administration''.+From the main menu select ''Administration'' -> ''Group/User Administration''.
  
-{{:master:tapemaster_user.png}}+<note tip>If the menu option **Administration** is greyed out and inaccessible, you do not have sufficient privileges (tapemaster rights) to add Users</note> 
 + 
 +{{menu_admin_group_user_admin.gif}}
  
 To add a new User, right-click in the white space on the User Administration screen and select ''Add''. To add a new User, right-click in the white space on the User Administration screen and select ''Add''.
  
-{{:master:tapemaster_user_add.png}}+{{menu_admin_group_user_admin_add.gif}}
  
 To update an existing User, double-click on that User or right-click and select ''Properties''. To update an existing User, double-click on that User or right-click and select ''Properties''.
  
-The ''Add New User'' window will display six tabs:+The ''Add New User'' window will display three tabs:
   * [[#Identity]]   * [[#Identity]]
-  * [[#Group]] 
   * [[#IP Ranges]]   * [[#IP Ranges]]
   * [[#Access]]   * [[#Access]]
-  * [[#Options]] +
-  * [[#Defaults]]+
  
 ===== Identity ===== ===== Identity =====
-The ''Identity'' tab provides fields to update the ''User-ID'' and ''Name''. 
-  * User ID: The User ID will be the user name that the user uses to login to TapeTrack products. 
-  * Name: The name is the User's desired display name. 
  
-<note important>If using windows Active Domain to log into TapeTrack, the username must match your AD username</note> +{{menu_admin_group_user_admin_add_identity.png}}
-{{:master:tapemaster_user_add_identity.png}}+
  
 +The ''Identity'' tab provides fields to update the:
 +  * **Identity**
 +    * **User-ID**: The User-ID will be the user name that the user uses to login to TapeTrack products.
 +    * **Name**: The name is the User's desired display name.
 +  * **Group**
 +    * **Group-ID**: Select group to assign user to from the drop-down list or [[master:create_group|add new group]].
 +    * **Role**: Hierarchical role of the User.
 +  * **Options**
 +    * **Administrative rights**: When set to ''True'' the User will have Administration Rights with Server Administrator privileges or the ability to Add/Delete Customers and Media Types.
 +    * **Scan-In Only**: When set to ''True'' the User will only be able to Scan tapes into the system.
 +    * **Disabled**: When set to ''True'' the User's access will be in a disabled status, so that they are not able to access any TapeTrack products. This does not delete the User. 
 +    * **No Scanner**: When set to ''True'' the Barcode Scanning Window will provide an auto-complete drop-down.
 +    * **No Time-Out**: By default, all User's are logged out of TapeMaster after ten minutes of inactivity. Setting this to ''True'', the selected User will not time out. 
 +    * **tapemaster rights**: When set to ''True'', it allows the User to gain the same administrative rights as the tapemaster superuser account. Only the User-ID tapemaster can add tapemaster rights to another user.
 +    * **Allow access inheritance**: Allows User to inherit another User's access rights using variable [[variable:tmssuserinherit|TMSSUSERINHERIT]] with [[cli:introduction|Command Line Utility]] Programs
 +    * **Certify**: Assigns the ability to [[master:generate_certificate|generate certificates]].
 +    * **AD Domain**: This is required if the User logs on to TapeTrack with their Active Directory Username and Password.
 +    * **Require AD Group**: When set to ''True'', the User must use their [[https://en.wikipedia.org/wiki/Active_Directory|Active Directory]] credentials to logon.
 +  * **Client Access**
 +    * **TapeMaster**: Authorizes User-ID access to TapeMaster
 +    * **Lite**: Authorizes User-ID access to Lite
 +    * **Checkpoint**: Authorizes User-ID access to Checkpoint
 +    * **Sync**: Authorizes User-ID access to Sync software.
 +  * **Details**
 +    * **Email Address**: Allows inclusion of user email, which may be used instead of username to log into TapeTrack directly (ie not using Active Directory)
 +    * **Description**: Add description to User-ID.
 +  * **Defaults**
 +    * **Customer-ID**: Sets Customer-ID for User in Scan-In window.  Once Customer-ID is set, Media-ID field will be displayed.
 +    * **Media-ID**: Sets Media-ID for User in Scan-In window.
 +  * **One-Time-Password**
 +    * **Enabled**: Enables the use of 2FA or One time password for login.
 +    * **Activated**: Shows if 2FA or One time password is activated. Activated only displays if Enabled is set to True.
  
-===== Group ===== 
-The ''Group'' tab is where a User is added to a group depending on their role and access required. 
-  * Group: Associates the selected User with a Group. 
-  * Role: Sets the Role for the User. 
-{{:master:tapemaster_user_add_group.png}} 
  
-Select group to assign user to from the drop-down list or [[master:create_group|add new group]].+  
 +<note important>If using windows Active Domain to log into TapeTrack, the username must match your AD username</note>
  
-===== IP Ranges ===== 
  
-The ''IP Ranges'' tab sets restrictions on which IP addresses a User can access the TapeTrack Server from. To add or delete, right-click the window. Global Access (0.0.0.0) will allow access from any IP. 
  
-{{:master:tapemaster_user_ip.png}} 
  
-===== Access ===== 
-The ''Access'' tab sets permissions for which Customers the selected User can access and how that User can interact with Volumes in the selected Customer. 
  
-{{:master:tapemaster_user_add_access.png}} 
-  * Customer ID: Enter the Customer-ID for the Customer that the User should have access to. 
-      * US01 will give access to US01 only 
-      * US*  will give access to all customers starting with US 
-      * * will give access to all customers  
-   * Read: Allows the User to view but not update Volumes in the above Customer. Must be enabled for the User to be able to view Volumes in the selected Customer ID. 
-   * Write: Allows the User to perform basic operations for Volumes in a Customer. 
-   * Alter: Allows the User to Add and Delete Media and Volumes to the selected Customer. 
-Click ''Add''.  
  
-===== Options ===== 
-The ''Options'' tab has 3 sections to provide access to additional features of the software. 
  
-{{:master:tapemaster_user_add_options.png?474}} 
-==== Options ==== 
-In the ''Options'' section is where you can select ''True'' or ''False'' to give that User access to that feature. 
  
-   * **Administrative rights**: When set to ''True'' the User will have Administration Rights with Server Administrator privileges or the ability to Add/Delete Customers and Add/Delete Media Types. +===== IP Ranges =====
-   * **Scan-In Only**: When set to ''True'' the User will only be able to Scan tapes into the system. +
-   * **Disabled**: When set to ''True'' the User's access will be in a disabled status, so that they are not able to access any TapeTrack products. This does not delete the User.  +
-   * **No Scanner**: When set to ''True'' the Barcode Scanning Window will provide an auto-complete drop-down. +
-   * **No Time-Out**: By default, all User's are logged out of TapeMaster after ten minutes of inactivity. Setting this to ''True'', the selected User will not time out.  +
-   * **Tapemaster rights**: When set to ''True'', it allows the User to gain the same administrative rights as the tapemaster superuser account.  +
-   * **Certify**: Assigns the ability to [[master:generate_certificate|generate certificates]]. +
-   * **AD Domain**: This is required if the User logs on to TapeTrack with their Active Directory Username and Password. +
-   * **Require AD Group**: When set to ''True'', the User must use their [[https://en.wikipedia.org/wiki/Active_Directory|Active Directory]] credentials.+
  
 +The ''IP Ranges'' tab sets restrictions on which IP addresses a User can access the TapeTrack Server from. 
  
-==== Client Access ====+If setting IP's, ensure Users have a static IP address so they are not denied access if trying to access from a dynamic address such as using a remote or home connection.
  
-  * When any of the ''Client Access'' are set to ''True'', it allows the User to have access to the TapeTrack software that is selected.+{{menu_admin_group_user_admin_add_ipranges.gif}}
  
-Default settings give access to TapeMaster, Lite and Sync.+To add or delete, right-click the window and select from the menu. 
  
-==== Details ====+Global Access (0.0.0.0) will allow access from any IP, this value will need to be removed if added a restricted IP list as all values in the list are valid.
  
-  * Allows inclusion of user email, which may be used instead of username to log into TapeTrack directly (ie not using Active Directory). 
-==== Defaults ==== 
  
-The ''Defaults'' tab sets a User's default [[object:customer|Customer]] and [[object:media|Media Type]] for Barcode scanning. These defaults can be changed in the [[desktop:scan_window|Barcode Scanning Window]] at any point.+===== Access ===== 
 +The ''Access'' tab sets permissions for which Customers the selected User can access and how that User can interact with Volumes in the selected Customer. 
 + 
 +{{menu_admin_group_user_admin_add_access.gif}} 
 + 
 +  * **Customer-ID**: Enter the Customer-ID for the Customer that the User should have access to. 
 +      * US01 will give access to US01 only 
 +      * US*  will give access to all customers starting with US 
 +      * * will give access to all customers  
 +   * **Read**: Allows the User to view but not update Volumes in the above Customer. Must be enabled for the User to be able to view Volumes in the selected Customer-ID. 
 +   * **Write**: Allows the User to perform basic operations for Volumes to the selected Customer. 
 +   * **Alter**: Allows the User to Add and Delete Media and Volumes to the selected Customer. 
 +   * **Catalog**: Allows User to access Catalog information on the selected Customer.
  
-{{:master:tapemaster_user_add_defaults.png}}+For each Customer access, click ''Add'' to commit the data.  Predicted access rights will then be displayed in the lower window. 
  
-Once all information is correct and complete click ''Save'' to create new user.+Once all data has been entered, click ''Save'' to create User.
  
 +[[:troubleshooting:add_user|Troubleshooting: Add user errors]]
  
  
  
-<- master:set_password|Setting a password^ master:starting|Getting Started ^ master:customer|Creating a new customer->+<- master:set_password|Setting a password^ master:starting|Getting Started ^ master:customer|Creating a new Customer->
              
  
master/user.1535080174.txt.gz · Last modified: 2025/01/21 22:07 (external edit)