Creating Users and User Roles

This chapter contains the following topics:

Overview

Cisco IMC Supervisor supports the following system-defined user roles by default:
  • System Admin — A user with the privilege of adding users. As an administrator in Cisco IMC Supervisor, you can assign users to system-provided user roles or to custom-defined user roles. In addition, at a later point in time, you can view information on the role that a user is assigned to. You can perform the following tasks with user roles:

    • Create a custom user role in the system, and create users with this role or assign the role to existing users.

      When you create a new user role, you can specify if the role is that of an administrator or an operator. For more information about creating users, see Creating a User and for create user roles, see Adding a User Role.

    • Modify existing user roles, including default roles, to change menu settings and read/write permissions for users associated with that role.

      The procedure to modify menu settings and permissions for a role is the same as the procedure followed while creating a user role.

  • Group Admin — A system-defined user group Default Group is available by default in Cisco IMC Supervisor. As a group administrator, you can create and assign users to this group or you can assign them to the groups you have created. A user can be part of multiple user groups. However, the group that the user was most recently added to is set as the default primary group for the user.

  • Operator — As the system administrator's role type is admin, you can modify the existing Operator role as required with any combination of access restrictions (menu settings and user permissions).

Creating a User

Perform this procedure when you want to create a new user.


Note

You cannot edit the User Role and Login Name fields in the Edit User dialog box.

Procedure
    Step 1   From the menu bar, choose Administration > Users and Groups.
    Step 2   Click the Users tab.
    Step 3   Click Add.
    Step 4   In the Add User dialog box, complete the following:

    Field

    Description

    User Role drop-down list

    Choose Group Admin, Operator, or System Admin.

    User Group drop-down list

    Select the group that the user will have access to. You can either select a group already available, or you can add a new group.

    Note   

    This field is visible only when you select Group Admin as the user role.

    Login Name field

    The login name for the user.

    Password field

    The password for the user. If the Lightweight Directory Access Protocol (LDAP) authentication is configured to the user, the password is validated only at the LDAP server, and not at the local server.

    Confirm Password field

    Repeat the password from the previous field.

    User Contact Email field

    The email address.

    First Name field

    (Optional) The first name of the user.

    Last Name field

    (Optional) The last name of the user.

    Phone field

    (Optional) The phone number of the user.

    Address field

    (Optional) The postal address of the user.

    Step 5   Click Add.
    Step 6   Click OK.

    Viewing Online Users

    Perform this procedure when you want to view users who are currently online.

    Procedure
      Step 1   From the menu bar, choose Administration > Users and Groups.
      Step 2   Click the Current Online Users tab. You can see the details such as username, IP address, session start time and so on of users who are currently logged on to Cisco IMC Supervisor.

      Adding a User Role

      On a newly installed Cisco IMC Supervisor appliance, by default, a GroupAdmin role and Operator role is available. As the group admin's role type is admin, you can modify the existing Operator role as required with any combination of access restrictions (menu settings and user permissions). Similarly, you can also create new roles as in the following procedure and assign users to it.

      Procedure
        Step 1   From the menu bar, choose Administration > System.
        Step 2   Click the User Roles tab.
        Step 3   Click Add.
        Step 4   In the Add User Role dialog box, complete the following for User Role pane:

        Field

        Description

        User Role field

        A descriptive name for the user role.

        Role Type drop-down list

        Choose Admin.

        Description field

        (Optional) A description of the user role.

        Step 5   Click Next.
        Step 6   In theMenu Settings pane, select the required menu options.

        To choose the menu option, check the checkbox against the menu setting field.

        Step 7   Click Next.
        Step 8   In theUser Permissions pane, select the required operations.

        To choose the operation, check the checkbox against the operation.

        Step 9   Click Submit.
        Step 10   In the confirmation dialog box, click OK.
        Note   

        You can also, edit, clone, and delete user roles.

        Adding a User Group

        Perform this procedure when you want to add a new user group.

        Procedure
          Step 1   From the menu bar, choose Administration > Users and Groups.
          Step 2   Click the User Groups tab.
          Step 3   Click Add.
          Step 4   In the Add User Group dialog box, complete the following:

          Field

          Description

          Name field

          A name of the user group.

          Description field

          (Optional) A description of the user group.

          Code field

          (Optional) A shorter name or code name for the group.

          Cost Center field

          (Optional) The cost center name or number if required. This name or number represents a cost center that a group is associated with.

          Contact Email field

          The email used to notify the group owner about the status of service requests and request approvals if necessary.

          First Name field

          (Optional) The contact’s first name.

          Last Name field

          (Optional) The contact’s last name.

          Phone field

          (Optional) The contact’s phone number.

          Address field

          (Optional) The contact’s address.

          Group Share Policy drop-down list

          (Optional) Choose the group share policy for the users in this group.

          This drop-down list is populated only when you have created group share policies.

          Allow Resource Assignment To Users checkbox

          (Optional) If checked, the users of this group can have resources assigned to them and can own these resources. Also, these users can view resources belonging to the group. However, the resources among these users cannot be shared.

          Step 5   Click Add.
          Step 6   Click OK.
          Note   

          You can select these user groups and manage them by viewing, editing, deleting, enabling, and disabling them. You can also manage tags from the User Groups tab.

          Branding a User Group

          Perform the following procedure when you want to customize the Cisco IMC Supervisor application for a group of users. When users who belong to a selected group login to the system, they will see the customized page.
          Procedure
            Step 1   From the menu bar, choose Administration > Users and Groups.
            Step 2   Click the User Groups tab.
            Step 3   Select a user group.
            Step 4   Click Branding.
            Step 5   In the Group Branding dialog box, complete the following:

            Field

            Description

            Logo Image checkbox

            If checked, the logo appears on the top left corner of the application .

            Application Labels checkbox

            If checked, the application labels appear on top header section of the application.

            URL Forwarding on Logout checkbox

            If checked, user will be forwarded to the provided URL on logout.

            Custom Links checkbox

            If checked, custom links will appear on the top right corner of the application.

            Step 6   Click Submit.
            Step 7   Click OK in the Submit Result dialog box.

            Group Share Policy

            A group share policy provides more control to the users on the resources and what they can share with other users. With this policy, users can view resources that are currently assigned only to them or can view resources that are assigned to all groups that the users are part of.

            While you are creating a group, you can define a group share policy and determine which groups have read/write permissions. Later on, when users are added to this group, their access to resources is defined by the group share policy that is applied to the group.

            Adding Group Share Policy

            Perform this procedure when you want to add a policy and share it with a user group.

            Procedure
              Step 1   From the menu bar, choose Administration > Users and Groups.
              Step 2   Click the Group Share Policy tab.
              Step 3   Click Add.
              Step 4   In the Add Group Share Policy dialog box, complete the following fields:

              Field

              Description

              Policy Name field

              The name of the group share policy.

              Policy Description field

              The description of the policy.

              Select Groups drop-down list

              Choose the groups to share the policy you have created.

              Step 5   Click Submit.
              Step 6   Click OK in the Submit Result dialog box.
              Note   

              You can also select an existing policy to view, edit, delete, and clone them.