Users

User is one of the fundamental data model entities. Only defined users are allowed to connect to monitored servers. Users’ definitions can be managed locally or imported from LDAP directory.

Users configuration page

The user configuration page allows defining new and editing existing users, who are allowed to access IT infrastructure resources.

To access the users configuration page, select Management > Users.

Adding a user

Warning

Data model objects: users, servers, bastions and connections are replicated within the cluster and object instances must not be added on each node. In case the replication mechanism fails to copy objects to other nodes, contact technical support department.

1. Select Management > Users.
2. Click Add.

Note

FUDO enables creating users based on the existing users definitions. Click the desired user definition to access the user configuration form and click Copy user to create a new object based on the selected definition.

3. Enter a unique user login.

Note

Note that the login field is case insensitive.

4. Select the account’s validity period.
5. Select the user role, which will determine the user’s access rights.

6. Select the default language of the FUDO administration panel.
7. Enter the full name for identification purposes (optional).
8. Provide the email address for sending notifications (optional).
9. Enter the name of the organization (optional).
10. Provide user’s phone number (optional).
11. Select users allowed to manage given object (optional).

Note

Only users with admin or operator role are listed.

12. Select user’s permissions to server, user and connection entities (applicable to admin and operator users).
13. Assign connections to allow the user to connect to monitored servers.
14. Select user authorization method.

Note

For additional information on user authorization methods refer to the Users authorization topic.

15. Define configuration parameters for the selected authorization method.

• Password

  Enter password to authorize the user when connecting to FUDO.

• SSH key

  Click the Upload button and provide path to the file containing the user’s public SSH key.

Note

Authorizing users with SSH key does not apply to anonymous connections thus users will be asked for password when connecting to anonymous servers even when they have their SSH keys uploaded to the server.

• External Authentication

  Select the desired authorization server from the the drop-down list.

16. Click Add authentication method to define additional authentication methods.
17. Click Save.

Note

FUDO allows importing users definitions from directory services such as Active Directory or LDAP. For more information on users synchronization service, refer to the Users synchronization topic.

Editing a user

1. Select Management > Users.

2. Find desired user definition.
3. Click user’s login to access its configuration parameters.
4. Modify configuration parameters as desired.

Note

Unsaved changes are marked with an icon.

5. Click Save.

Blocking and unblocking a user

Warning

Blocking a user will terminate its current connections.

1. Select Management > Users.
2. Find and select the desired user definition.
3. Click Block to disallow the user to connect to servers or Unblock to allow user to connect to servers.
4. Provide a descriptive reason for blocking the given user and click Confirm.

Deleting a user

Warning

Deleting a user definition will terminate its current connections.

1. Select Management > Users.

2. Find and select the desired user definition.

3. Click Delete.

4. Confirm resource deletion.

Roles

Role	Access rights
user	Connecting to servers as defined in connections, to which the user has been assigned.
operator	logging in to administration panel browsing objects: servers, users, bastions, connections, to which the user has been assigned sufficient access permisions blocking/unblocking objects: servers, users, bastions, connections generating reports on demand and subscribing to periodic reports activating/deactivating email notifications converting sessions and downloading converted content
admin	logging in to administration panel managing objects: servers, users, bastions, connections, to which the user has been assigned sufficient access permisions blocking/unblocking objects: servers, users, bastions, connections generating reports on demand and subscribing to periodic reports activating/deactivating email notifications converting sessions and downloading converted content managing policies
superadmin	full access rights to objects management full access rights to system configuration options

Related topics:

• Users synchronization
• Data model
• System initiation
• Servers
• Connections