Differences

This shows you the differences between two versions of the page.

--- master:user [2019/02/27 21:36] – Gerard Nicol
+++ master:user [2025/01/21 22:07] (current) – external edit 127.0.0.1
@@ Line 3: / Line 3: @@
 To be able to login to a TapeTrack Framework Server, you must have a [[object:user|User-ID]] and password.
-This section describes how to add a new User-ID and set attributes for that User-ID.
+This section describes how to create a new User-ID and set Attributes for that User-ID.
 ===== Group/User Administration =====
-On the ''Administration'' drop-down menu in TapeTrack TapeMaster select ''Group/User Administration''.
+From the main menu select ''Administration'' -> ''Group/User Administration''.
-{{:master:tapemaster_user.png}}
+<note tip>If the menu option **Administration** is greyed out and inaccessible, you do not have sufficient privileges (tapemaster rights) to add Users</note>
+{{menu_admin_group_user_admin.gif}}
 To add a new User, right-click in the white space on the User Administration screen and select ''Add''.
-{{:master:tapemaster_user_add.png}}
+{{menu_admin_group_user_admin_add.gif}}
 To update an existing User, double-click on that User or right-click and select ''Properties''.
@@ Line 26: / Line 28: @@
 ===== Identity =====
-{{:master:tapemaster_user_add_identity.png}}
+{{menu_admin_group_user_admin_add_identity.png}}
 The ''Identity'' tab provides fields to update the:
@@ Line 33: / Line 35: @@
     * **Name**: The name is the User's desired display name.
   * **Group**
-    * **Group ID**: Select group to assign user to from the drop-down list or [[master:create_group|add new group]].
+    * **Group-ID**: Select group to assign user to from the drop-down list or [[master:create_group|add new group]].
+    * **Role**: Hierarchical role of the User.
   * **Options**
     * **Administrative rights**: When set to ''True'' the User will have Administration Rights with Server Administrator privileges or the ability to Add/Delete Customers and Media Types.
@@ Line 40: / Line 43: @@
     * **No Scanner**: When set to ''True'' the Barcode Scanning Window will provide an auto-complete drop-down.
     * **No Time-Out**: By default, all User's are logged out of TapeMaster after ten minutes of inactivity. Setting this to ''True'', the selected User will not time out.
-    * **tapemaster rights**: When set to ''True'', it allows the User to gain the same administrative rights as the tapemaster superuser account.
+    * **tapemaster rights**: When set to ''True'', it allows the User to gain the same administrative rights as the tapemaster superuser account. Only the User-ID tapemaster can add tapemaster rights to another user.
+    * **Allow access inheritance**: Allows User to inherit another User's access rights using variable [[variable:tmssuserinherit|TMSSUSERINHERIT]] with [[cli:introduction|Command Line Utility]] Programs
     * **Certify**: Assigns the ability to [[master:generate_certificate|generate certificates]].
     * **AD Domain**: This is required if the User logs on to TapeTrack with their Active Directory Username and Password.
@@ Line 55: / Line 59: @@
     * **Customer-ID**: Sets Customer-ID for User in Scan-In window.  Once Customer-ID is set, Media-ID field will be displayed.
     * **Media-ID**: Sets Media-ID for User in Scan-In window.
+  * **One-Time-Password**
+    * **Enabled**: Enables the use of 2FA or One time password for login.
+    * **Activated**: Shows if 2FA or One time password is activated. Activated only displays if Enabled is set to True.
@@ Line 71: / Line 78: @@
 The ''IP Ranges'' tab sets restrictions on which IP addresses a User can access the TapeTrack Server from.
-{{:master:tapemaster_user_ip.png}}
+If setting IP's, ensure Users have a static IP address so they are not denied access if trying to access from a dynamic address such as using a remote or home connection.
+{{menu_admin_group_user_admin_add_ipranges.gif}}
 To add or delete, right-click the window and select from the menu.
-Global Access (0.0.0.0) will allow access from any IP.
+Global Access (0.0.0.0) will allow access from any IP, this value will need to be removed if added a restricted IP list as all values in the list are valid.
@@ Line 81: / Line 90: @@
 The ''Access'' tab sets permissions for which Customers the selected User can access and how that User can interact with Volumes in the selected Customer.
-{{:master:tapemaster_user_add_access.png}}
+{{menu_admin_group_user_admin_add_access.gif}}
-  * **Customer ID**: Enter the Customer-ID for the Customer that the User should have access to.
+  * **Customer-ID**: Enter the Customer-ID for the Customer that the User should have access to.
       * US01 will give access to US01 only
       * US*  will give access to all customers starting with US
       * * will give access to all customers
-   * **Read**: Allows the User to view but not update Volumes in the above Customer. Must be enabled for the User to be able to view Volumes in the selected Customer ID.
+   * **Read**: Allows the User to view but not update Volumes in the above Customer. Must be enabled for the User to be able to view Volumes in the selected Customer-ID.
    * **Write**: Allows the User to perform basic operations for Volumes to the selected Customer.
    * **Alter**: Allows the User to Add and Delete Media and Volumes to the selected Customer.
    * **Catalog**: Allows User to access Catalog information on the selected Customer.
-For each Customer access, click ''Add'' to commit the data.  Predicted access rights will them be displayed in the lower window.
+For each Customer access, click ''Add'' to commit the data.  Predicted access rights will then be displayed in the lower window.
 Once all data has been entered, click ''Save'' to create User.
@@ Line 99: / Line 109: @@
-<- master:set_password|Setting a password^ master:starting|Getting Started ^ master:customer|Creating a new customer->
+<- master:set_password|Setting a password^ master:starting|Getting Started ^ master:customer|Creating a new Customer->