KACE Systems Management Appliance 13.2 Common Documents

About user accounts and user authentication

User accounts can be created and managed on the appliance. Users who access the Administrator Console and User Console using these accounts are referred to as locally authenticated.

As an alternative to local authentication, you can set up external authentication through an external LDAP server. See Using an LDAP server for user authentication.

Types of locally authenticated user accounts include:

•

System-level user accounts. Accounts that enable users to log in to the System Administration Console to manage appliance settings, such as the appliance host name and network settings. System-level user accounts include the default admin account for the appliance. These accounts also enable access to organization-level components (admiui) and the User Console. See Managing System-level user accounts.

•

Organization user accounts. Accounts that enable users to log in to the Administrator Console Organization level (Administrator Console ) to manage organization-specific components. These components may include Inventory, Assets, Distribution, Scripting, Security, Service Desk, and User Console depending on the user's role. See Managing organization user accounts.

About locale settings

Locale settings determine the language used for text in the interfaces. You can select locale settings for the Command Line Console, Administrator Console, and User Console.

See Configuring locale settings.

Managing System-level user accounts

Add or edit System-level user accounts

Manage appliance administrator email notifications

Delete System-level user accounts

System-level user accounts enable users to log in to the System Administration Console to manage appliance settings, such as the appliance host name and network settings. System-level user accounts authenticate users locally on the appliance.

To use an LDAP server for user authentication, see Using an LDAP server for user authentication.

NOTE: You cannot delete the default admin account. You can change the user name of the admin account or disable it on the appliance (LDAP or SAML configuration required). You can also change the admin account password. See Add or edit System-level user accounts. Additionally, if the Organization component is enabled on your appliance, or if you want to link multiple K-Series appliances, use caution when changing the login and password of the admin account. The admin account login names and passwords on all linked appliances and organizations must be the same if you want to switch among them using the drop-down list in the top-right corner of the System Administration Console. The drop-down list shows only those appliances and organizations whose admin account login names and passwords are the same.

NOTE: See Enable fast switching for organizations and linked appliances.

Add or edit System-level user accounts

You can add or edit System-level user accounts as needed. These accounts enable users to log in to the System Administration Console to manage appliance settings.

If the Organization component is enabled on your appliance, you can also add or edit organization-specific user accounts. See Managing organization user accounts.

NOTE: You cannot delete the default admin account. You can change the user name of the admin account or disable it on the appliance (LDAP or SAML configuration required). You can also change the admin account password. Additionally, if the Organization component is enabled on your appliance, or if you want to link multiple K-Series appliances, use caution when changing the login and password of the admin account. The admin account login names and passwords on all linked appliances and organizations must be the same if you want to switch among them using the drop-down list in the top-right corner of the System Administration Console. The drop-down list shows only those appliances and organizations whose admin account login names and passwords are the same.

NOTE: See Enable fast switching for organizations and linked appliances.

Go to the Administrator Detail page:

Log in to the appliance System Administration Console, http://appliance_hostname/system, or select System from the drop-down list in the top-right corner of the page.

On the left navigation bar, click Settings, then click Administrators.

Display the Administrator Detail page by doing one of the following:

▪

Click the name of an administrator

▪

Select Choose Action > New.

Enter or change the user information.

Option

Description

(Required) The name the user types in the Login ID field on the login page. If you are editing the default admin account, you can change the login name, however use caution when changing the login and password of the admin account. The admin account login names and passwords on all linked appliances and organizations must be the same if you want to switch between them using the drop-down list in the top-right corner of the System Administration Console. The drop-down list shows only those appliances and organizations whose admin account login names and passwords are the same.

Name

The user’s full name.

Primary Email

The user’s primary email address.

Additional Emails

Any additional email addresses associated with the user.

Domain

The Active Directory domain associated with the user.

Budget Code

The code of the financial department associated with the user.

Location

The name of the work site or building where the user is located.

Work Phone, Home Phone, Mobile Phone, and Pager Number

The user’s telephone numbers.

Custom 1-4

Any additional information about the user or the user’s account.

Password and Confirm Password

(Required) The password the user types when logging in.

If the Organization component is enabled on your appliance, or if you want to link multiple K-Series appliances, use caution when changing the password of the admin account. Admin account passwords for the System-level, for organizations, and for linked appliances must be the same if you want to switch among them using the drop-down list in the top-right corner of the Administrator Console. The drop-down list shows only those organizations and appliances whose admin account passwords are the same.

Role

(Required) Roles are assigned to user accounts to control access to the Administrator Console and User Console. Default administrator roles include:

•

Administrator: This user can log in to and access all features in the Administrator Console.

•

Read Only Administrator: This user can log in but cannot modify any settings in the Administrator Console.

You cannot change the role of the default admin account.

Make default

Select this option if you want the selected role to become the default role for new users.

Locale

The locale to use for the Administrator Console and User Console for the user. You cannot change the locale of the default admin account.

Click Save.