TapeTrack Documentation

Because there is more to tape management than you ever realized

User Tools

Site Tools

Trace: • sources • delete_volumes • user • warnings_and_oversight • installing • introduction
master:user

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

master:user [2019/01/18 02:07] – [IP Ranges] Scott Cunliffemaster:user [2025/01/21 22:07] (current) – external edit 127.0.0.1
Line 3: Line 3:
 To be able to login to a TapeTrack Framework Server, you must have a [[object:user|User-ID]] and password. To be able to login to a TapeTrack Framework Server, you must have a [[object:user|User-ID]] and password.
  
-This section describes how to add a new User-ID and set attributes for that User-ID.+This section describes how to create a new User-ID and set Attributes for that User-ID.
  
  
 ===== Group/User Administration ===== ===== Group/User Administration =====
  
-On the ''Administration'' drop-down menu in TapeTrack TapeMaster select ''Group/User Administration''.+From the main menu select ''Administration'' -> ''Group/User Administration''.
  
-{{:master:tapemaster_user.png}}+<note tip>If the menu option **Administration** is greyed out and inaccessible, you do not have sufficient privileges (tapemaster rights) to add Users</note> 
 + 
 +{{menu_admin_group_user_admin.gif}}
  
 To add a new User, right-click in the white space on the User Administration screen and select ''Add''. To add a new User, right-click in the white space on the User Administration screen and select ''Add''.
  
-{{:master:tapemaster_user_add.png}}+{{menu_admin_group_user_admin_add.gif}}
  
 To update an existing User, double-click on that User or right-click and select ''Properties''. To update an existing User, double-click on that User or right-click and select ''Properties''.
Line 25: Line 27:
  
 ===== Identity ===== ===== Identity =====
 +
 +{{menu_admin_group_user_admin_add_identity.png}}
 +
 The ''Identity'' tab provides fields to update the: The ''Identity'' tab provides fields to update the:
   * **Identity**   * **Identity**
-    * **User-ID**: The User ID will be the user name that the user uses to login to TapeTrack products.+    * **User-ID**: The User-ID will be the user name that the user uses to login to TapeTrack products.
     * **Name**: The name is the User's desired display name.     * **Name**: The name is the User's desired display name.
   * **Group**   * **Group**
-    * **Group ID**: Select group to assign user to from the drop-down list or [[master:create_group|add new group]].+    * **Group-ID**: Select group to assign user to from the drop-down list or [[master:create_group|add new group]]. 
 +    * **Role**: Hierarchical role of the User.
   * **Options**   * **Options**
     * **Administrative rights**: When set to ''True'' the User will have Administration Rights with Server Administrator privileges or the ability to Add/Delete Customers and Media Types.     * **Administrative rights**: When set to ''True'' the User will have Administration Rights with Server Administrator privileges or the ability to Add/Delete Customers and Media Types.
Line 37: Line 43:
     * **No Scanner**: When set to ''True'' the Barcode Scanning Window will provide an auto-complete drop-down.     * **No Scanner**: When set to ''True'' the Barcode Scanning Window will provide an auto-complete drop-down.
     * **No Time-Out**: By default, all User's are logged out of TapeMaster after ten minutes of inactivity. Setting this to ''True'', the selected User will not time out.      * **No Time-Out**: By default, all User's are logged out of TapeMaster after ten minutes of inactivity. Setting this to ''True'', the selected User will not time out. 
-    * **tapemaster rights**: When set to ''True'', it allows the User to gain the same administrative rights as the tapemaster superuser account. +    * **tapemaster rights**: When set to ''True'', it allows the User to gain the same administrative rights as the tapemaster superuser account. Only the User-ID tapemaster can add tapemaster rights to another user. 
 +    * **Allow access inheritance**: Allows User to inherit another User's access rights using variable [[variable:tmssuserinherit|TMSSUSERINHERIT]] with [[cli:introduction|Command Line Utility]] Programs
     * **Certify**: Assigns the ability to [[master:generate_certificate|generate certificates]].     * **Certify**: Assigns the ability to [[master:generate_certificate|generate certificates]].
     * **AD Domain**: This is required if the User logs on to TapeTrack with their Active Directory Username and Password.     * **AD Domain**: This is required if the User logs on to TapeTrack with their Active Directory Username and Password.
-    * **Require AD Group**: When set to ''True'', the User must use their [[https://en.wikipedia.org/wiki/Active_Directory|Active Directory]] credentials.+    * **Require AD Group**: When set to ''True'', the User must use their [[https://en.wikipedia.org/wiki/Active_Directory|Active Directory]] credentials to logon.
   * **Client Access**   * **Client Access**
     * **TapeMaster**: Authorizes User-ID access to TapeMaster     * **TapeMaster**: Authorizes User-ID access to TapeMaster
Line 52: Line 59:
     * **Customer-ID**: Sets Customer-ID for User in Scan-In window.  Once Customer-ID is set, Media-ID field will be displayed.     * **Customer-ID**: Sets Customer-ID for User in Scan-In window.  Once Customer-ID is set, Media-ID field will be displayed.
     * **Media-ID**: Sets Media-ID for User in Scan-In window.     * **Media-ID**: Sets Media-ID for User in Scan-In window.
 +  * **One-Time-Password**
 +    * **Enabled**: Enables the use of 2FA or One time password for login.
 +    * **Activated**: Shows if 2FA or One time password is activated. Activated only displays if Enabled is set to True.
  
  
    
 <note important>If using windows Active Domain to log into TapeTrack, the username must match your AD username</note> <note important>If using windows Active Domain to log into TapeTrack, the username must match your AD username</note>
-{{:master:tapemaster_user_add_identity.png}}+ 
  
  
Line 67: Line 78:
 The ''IP Ranges'' tab sets restrictions on which IP addresses a User can access the TapeTrack Server from.  The ''IP Ranges'' tab sets restrictions on which IP addresses a User can access the TapeTrack Server from. 
  
-{{:master:tapemaster_user_ip.png}}+If setting IP's, ensure Users have a static IP address so they are not denied access if trying to access from a dynamic address such as using a remote or home connection. 
 + 
 +{{menu_admin_group_user_admin_add_ipranges.gif}}
  
 To add or delete, right-click the window and select from the menu.  To add or delete, right-click the window and select from the menu. 
  
-Global Access (0.0.0.0) will allow access from any IP.+Global Access (0.0.0.0) will allow access from any IP, this value will need to be removed if added a restricted IP list as all values in the list are valid.
  
  
Line 77: Line 90:
 The ''Access'' tab sets permissions for which Customers the selected User can access and how that User can interact with Volumes in the selected Customer. The ''Access'' tab sets permissions for which Customers the selected User can access and how that User can interact with Volumes in the selected Customer.
  
-{{:master:tapemaster_user_add_access.png}} +{{menu_admin_group_user_admin_add_access.gif}} 
-  * **Customer ID**: Enter the Customer-ID for the Customer that the User should have access to.+ 
 +  * **Customer-ID**: Enter the Customer-ID for the Customer that the User should have access to.
       * US01 will give access to US01 only       * US01 will give access to US01 only
       * US*  will give access to all customers starting with US       * US*  will give access to all customers starting with US
       * * will give access to all customers        * * will give access to all customers 
-   * **Read**: Allows the User to view but not update Volumes in the above Customer. Must be enabled for the User to be able to view Volumes in the selected Customer ID.+   * **Read**: Allows the User to view but not update Volumes in the above Customer. Must be enabled for the User to be able to view Volumes in the selected Customer-ID.
    * **Write**: Allows the User to perform basic operations for Volumes to the selected Customer.    * **Write**: Allows the User to perform basic operations for Volumes to the selected Customer.
    * **Alter**: Allows the User to Add and Delete Media and Volumes to the selected Customer.    * **Alter**: Allows the User to Add and Delete Media and Volumes to the selected Customer.
    * **Catalog**: Allows User to access Catalog information on the selected Customer.    * **Catalog**: Allows User to access Catalog information on the selected Customer.
  
-Click ''Add''.  +For each Customer access, click ''Add'' to commit the data.  Predicted access rights will then be displayed in the lower window. 
- +
-===== Options ===== +
-The ''Options'' tab has 3 sections to provide access to additional features of the software. +
- +
-{{:master:tapemaster_user_add_options.png?474}} +
-==== Options ==== +
-In the ''Options'' section is where you can select ''True'' or ''False'' to give that User access to that feature. +
- +
-   * **Administrative rights**: When set to ''True'' the User will have Administration Rights with Server Administrator privileges or the ability to Add/Delete Customers and Add/Delete Media Types. +
-   * **Scan-In Only**: When set to ''True'' the User will only be able to Scan tapes into the system. +
-   * **Disabled**: When set to ''True'' the User's access will be in a disabled status, so that they are not able to access any TapeTrack products. This does not delete the User.  +
-   * **No Scanner**: When set to ''True'' the Barcode Scanning Window will provide an auto-complete drop-down. +
-   * **No Time-Out**: By default, all User's are logged out of TapeMaster after ten minutes of inactivity. Setting this to ''True'', the selected User will not time out.  +
-   * **Tapemaster rights**: When set to ''True'', it allows the User to gain the same administrative rights as the tapemaster superuser account.  +
-   * **Certify**: Assigns the ability to [[master:generate_certificate|generate certificates]]. +
-   * **AD Domain**: This is required if the User logs on to TapeTrack with their Active Directory Username and Password. +
-   * **Require AD Group**: When set to ''True'', the User must use their [[https://en.wikipedia.org/wiki/Active_Directory|Active Directory]] credentials. +
- +
- +
-==== Client Access ==== +
- +
-  * When any of the ''Client Access'' are set to ''True'', it allows the User to have access to the TapeTrack software that is selected. +
- +
-Default settings give access to TapeMaster, Lite and Sync. +
- +
-==== Details ==== +
- +
-  . +
-==== Defaults ==== +
- +
-The ''Defaults'' tab sets a User's default [[object:customer|Customer]] and [[object:media|Media Type]] for Barcode scanning. These defaults can be changed in the [[desktop:scan_window|Barcode Scanning Window]] at any point. +
- +
-{{:master:tapemaster_user_add_defaults.png}} +
- +
-Once all information is correct and complete click ''Save'' to create new user.  Repeat instructions above to add more user-ID's or click the ''X'' at the top right corner to close the **User Administration** window.+
  
 +Once all data has been entered, click ''Save'' to create User.
  
 [[:troubleshooting:add_user|Troubleshooting: Add user errors]] [[:troubleshooting:add_user|Troubleshooting: Add user errors]]
Line 129: Line 109:
  
  
-<- master:set_password|Setting a password^ master:starting|Getting Started ^ master:customer|Creating a new customer->+<- master:set_password|Setting a password^ master:starting|Getting Started ^ master:customer|Creating a new Customer->
              
  
master/user.1547777279.txt.gz · Last modified: 2025/01/21 22:07 (external edit)