PERMISSION AND ACCESS TYPE FOR MULTIPLE ADMINISTRATORS PROFILE IN BZAS/HOSTFRONT SERVER VERSION 5.0

August 12, 2010

Introduction

Seagull Software has introduced a new feature in its recent release version 5.0 of the BZAS/HostFront Server which gives the ability to create multiple types of administrators that can be associated with its relevant permissions.

More Information

From the Host Access Manager (HAM) console, right click on the cluster database and select the “Properties“

2364image1

From the “Cluster Properties” window, select the “User accounts” tab to manage the administrator access rights to the cluster. These are the cluster administration management accounts.

2364image2

Host Access Manager provides five levels of administration access permissions:

  1. Administrator — Administrator has full read/write permissions on the cluster. This level can be used by a master administrator with full responsibility over the server configuration.

  2. Day-to-day Admin — Day-to-day administrator has limited permissions. He/she has no authority on the server or cluster configuration other than changing his/her password in the cluster properties.

  3. Group Admin — Group Administrator has limited permissions on a specific group.

  4. Manager — Manager has read-only permissions on almost all the configuration items. The only change that a Manager can perform is to reset a user’s password using the right-click shortcut menu on the username. This level can be used by technical support personnel to unlock users who repeatedly enter the wrong passwords, or resetting their passwords when they forget them.

  5. Monitor — Monitor has read-only permissions. This permission can be used to monitor the status of the cluster services and connected sessions without taking action.

The table below explains the specific permissions available for each administrator type.

Administrator Permissions

Permission Access type
Administrator     Day-to-day Admin     Group Admin     Manager     Monitor    
Cluster properties Y N N N N
Start/stop services Y N N N N
Disconnect user/session: all Y Y N Y N
Disconnect user/session: filtered Y Y Y Y N
Add/remove license keys Y N N N N
Add/remove/modify hosts Y N N N N
Add/remove servers/cluster services Y N N N N
Add/remove/edit groups Y Y Y N N
Add/remove/edit users Y Y Y Limited N
Add/remove/edit sessions Y Y N N N
Assign sessions to groups Y Y N N N
Assign sessions to users Y Y Y N N
Edit keyboard layouts Y Y N N N
Assign keyboards to languages Y Y N N N
Clear cluster database Y N N N N
HTML pages editing wizard Y N N N N
Quick configuration wizard Y N N N N

Steps to Create Admin Account

You can create two types of accounts:

  • Username/password combination for authentication
  • Windows Domain account

From the “Cluster Properties“, select the “User Account” tab, then to create a new administrator account click “Add” to display the following dialog box:

2364image3

To add a new Host Access Manager Admin username/password authentication, follow the steps below:

  1. In the Sign on ID field, type the sign-on name for the new HAM Admin account.

  2. In the Password field, type the password for the account.

  3. In the Confirm password field, retype the password for confirmation.

  4. From the Account type drop-down list, select the account type that you want to assign to the new Admin.

Notes

  • Usernames and passwords are case sensitive.
  • You cannot delete the default administrator account (Administrator) but you can change its password.

To add a new Windows Active Directory account, follow the steps below:

  1. Select the Windows Domain user check box.

  2. Click on the ellipsis next to the Sign on ID.

  3. Select one user (you cannot add more than one user at a time).

  4. From the Account type drop-down list, select the account type that you want to assign to the account.

The information in this article applies to all listed Servers including Demo and Setup versions:

– BlueZone Access Server Ver. 5.0 and higher
– HostFront Server Ver. 5.0 and higher