InfiMONITOR NEXT -  is a multi-user system with access rights differentiation. A separate account can be created for each monitoring system operator, to be used for authorization in the web interface.

Access rights

Access The access rights depend on the user account's role. There are following rolesThe roles are as follows:

• Superadmin - assumes full access rights and is assigned by default to the "admin" user account. This role does is not display displayed anywhere, cannot be removed and cannot be assigned.
• Admin - NEXT administrator role. The role provides the following access rights:
  • All operations with user accounts and user groups. The exception is the "admin" user account.
  • All operations with the wireless devices.
  • All operations with events.
  • View the monitoring system settings.
• Operator -  provides the following access rights:
  • View and manage wireless devices.
  • View and manage events.
  • View user accounts.
• Observer - assigned by default to all new NEXT user accounts.  The role provides the following access rights:
  
  • View the profiles of the wireless devices profiles.
  • View and manage events.
  • View user accounts.

...

Visibility areas are a restrictive add-on for access rights. The visibility area limits the list of wireless devices that the user can access. The list of the available devices list is determined by groups of devices assigned to a user account or to a group of accounts. Thus, the user will have access only to those devices that are included in the device groups assigned to him or in the users group where he belongs to.  Visibility The visibility area is also determined by the role:

• Superadmin and Admin - full visibility, a user will always see all devices.
• Operator and Observer - zero visibility, a user will only see the devices included in the groups assigned to him.

Let's look at the examplesan example:

• Devices The devices HostA and HostB included to the Group1 are part of Group1's devices group.Devices HostC
• The devices HostC and HostD included to the Group2 are part of Group2's devices group.
• User UserA has an Operator role the and Group1 is assigned to him.
• User UserB  has an Admin role the Group2 and Group2 is assigned to him.

As a result:

• User UserA can only manage the configuration of the HostA and HostB devices. His role assumes the management of the devices management, but the visibility area is limited only with devices group Group1to Group1.
• User UserB can perform all the operations with all the devices. His role allows any operation, and the visibility area is not limited.  It means This implies that assign assigning device groups to a user with the having an admin role has no sense.

Superadmin account

NEXT by default has By default, NEXT has a super-administrator account with the name "admin" . It that has a following features:

• The This administrator account login cannot be changed.
• An This admin account can not re removed.
• The This administrator account always has a Superadmin role.

User account management

Use the side Click on "Users" at the top menu to proceed to the user account management section:

.

By default, the section displays a list of groups and users user accounts. For each account, the following values are displayed:

• "Role" - current user role.
• "Name" - user name.
• "Login" - user login.
• "Email" - user email address.
• "Source" - account source:
  • NMS - local user account.
  • LDAP - account obtained from the directory server using the LDAP protocol.

Center
scroll-title title-alignment center title Figure - List of users accounts and groups

...

User groups

Groups are necessary to effectively manage the visibility areas of InfiMONITOR NEXT users visibility areas. Each user group can be assigned to one or more device groups. Thus, the visibility area of the group users will be extended to all the devices included in the device groups assigned to this user group.

• Each user must be included in at least one user group.
• By default, in the monitoring system the "Administrators" group is created, and with "admin" user included. This group is required and cannot be removed.having included the user with Superadmin role.

User group creation

To create a new user group, click on the "New Add group" button. A form will appear on the screen containing the following fields:

• "Name" - user group name.
• "Description" - arbitrary groups group description. 
• Devices groups - the list of devices groups that will be included in the visibility area of new user group.
• Users - the list of user accounts included in the group.

Fill these fields and click on the "Save" button to create add a new group.

Assigning device groups to user groups

Remove users group

...

Remove users groups

Create a user account

To add a new user account, click on the "New Add User" button. A form will appear on the screen containing two sections:

• Information - basic user account settings:
  • "Name"  - an arbitrary user name, such as his first and last name.
  • "Email"  - the email address of the user to which notifications will be sent.
  • "Login"  - user login used for authentication.
  • "Password" and "Password confirm" - account password and confirmation.
  • "Role" - account role."Active user" .
  • User groups - the list of groups where the account is included.
  • Hosts groups - the list of devices groups that will be included in the user's visibility area.
  • Active user - activation/deactivation flag of the user account. A user with a deactivated account will be denied the access to the NEXT web interface.
  Groups - user groups where this account is included. This section contains a current groups list. To remove an account from a group or include it in a new one, click the "Chose Groups" button and select or deselect the corresponding groups and click the "OK" button

There is field "Email" in "Notifications" section must be filled. This email will be used for user notifications.

To apply the changes, click the "Save" button.

Assigning

...

device groups