Domain user permissions
Ubiquity Manager
FTRA Manager
allows you to define user permissions for devices, groups, and individual user accounts. Devices, groups and user accounts inherit the permissions defined for the folder in which they are stored.Subfolders within your domain correspond to subdomains.
Subdomains
Domain subfolders
are useful for setting up specific access control settings for different business units, regions, or operations as appropriate for your environment. Rules assigned to subfolders and individual devices have priority over rules in parent folders that contain them.It is possible to set exceptions in the permissions settings of a user, despite this latter might belong to a group with pre-defined settings.
- InFTRA ManagerUbiquity Managerselect .
- In the left pane, select the folder or device for which you wish to set user permissions, then access thePermissionssection in the right pane.
- If the user for which you would like to set permissions is not listed in thePermissionssection, add it by clicking on the circled plus icon at the top right of the pane.
- Select the user or group and expand thePermission operationssection.
- Allow or deny permissions, as needed.
The table below shows the domain user permissions available. Each permission includes a set of granular permissions that can be allowed or denied.
Administration | It allows to manage operations related to the domain organization in terms of folders and access control. | |
Access User Accounts | It allows to access user profiles that are defined within folder paths and sub-paths for which the permission is given. | |
Manage User Accounts | It allows permission assignments and creation, editing and deletion of user accounts. | |
Manage Folders | It allows to create, edit, move, and remove folders. | |
View Connection Audit | It allows to access to the connections log. | |
View Operations Audit | It allows to access the administration log. | |
Network Security | It allows to manage the firewall configuration. | |
Device Installer | It allows to manage devices within a specific domain. | |
Interactive Access | It allows to interact with the remote device as a viewer and/or with read and write rights. | |
View the Desktop | It allows the Remote Desktop view only, whereas interaction is not allowed. | |
Interact with the Desktop | It allows the full Remote Desktop interaction. | |
Network Access (VPN) | It allows the VPN activation and subnetwork access. The subnetwork access can be filtered by applying firewall policies. | |
Passthrough (Serial + USB) | It allows to use a serial pass-through function (this option is subject to VPN activation). | |
Read Remote Files | It allows to read files from the remote system through the Explorer section in the Interactive Access applet. | |
Write Remote Files | It allows to write files to the remote systems through the Explorer section in the Interactive Access applet. | |
Chat | It allows the use of the chat through the Remote Desktop section in the Interactive Access applet. | |
System and Processes | It allows to access the remote processes viewer and possibly restart them as needed through the End process button in the Interactive Access applet. |
NOTE:
See Interactive Access for further information on this Tool applet.
NOTE:
Whilst an administrator profile is granted with
Access User Accounts
and Manage Users Accounts
permissions, it is not allowed to change or remove user permissions. An adiministrator profile allows to create users owning at most the same permissions granted to the administrator profile itself.
NOTE:
Users owning the
Manage Users Accounts
permission can change the password of other users through the section.Provide Feedback