QoreStor 7.1.3 - User Guide

QoreStor gives you the ability to define user roles and assign users to those roles, depending on the authentication type of the user. A local user can have more than one role. There are default user roles for the system as well.

QoreStor has the following types of local user roles: CIFS, OST, RDA, Secure Connect, Object, and Monitor. For the protocol specific user roles, the user is validated with the protocol credentials when the clients connect.

SAML users can have Administrator or Monitor roles. For more information about SAML authentication, see Configuring SAML.

Refer to these important notes about user management in QoreStor.

Excluding the admin, users can have multiple roles.
However, OST users are exclusive user roles that can only be assigned to one user at a time.
The admin user is a special default user; it cannot be deleted and no new administrator roles can be created.
The maximum number of users that can be created for the system is 64.

To view the Users page, on the left navigation menu, click Users.

Viewing users

You can view user accounts and settings through either the QoreStor GUI or the command line interface.

Viewing users through the GUI

To view users in the GUI, complete the following steps.

In the navigation menu, click Users.
On the Users page you can view the following columns of information about users of your system.
- Name—Displays the name of the user.
- Role—Displays the role(s) assigned to this user.
For each user, you have the available actions:
- Edit Roles - Displays the roles currently assigned to user and allows you to change assigned roles.
- Change password - Allows you to change the password for a user account.
- Remove - Removes the user account

Viewing users through the command line

To view users using the command line:

Access the QoreStor CLI. Refer to Accessing the CLI commands for more information.

View current user accounts with the command:

user --show [--users] [--logins] [--verbose][--name <username>] [--roles <cifs|ost|rda|ndmp|iscsi|monitor|administrator|secure_connect|object>

Refer to the QoreStor Command Line Reference Guide for more information.

Adding a user

You can easily add users and assign them specific system roles by using either the QoreStor GUI or the command line interface. The system supports up to 64 users.

Adding a user through the GUI

To add a user through the GUI, complete the following steps.

In the left navigation menu, click Users.
On the right side of the page, click Add User. The Add pane is displayed.
Enter the following information.
- Authentication Type—Select either Local, for user identities managed by QoreStor; or SAML, for user identities managed by an external identity provider.
- Name—For users with the Local authentication type, enter a user name between 1 and 32 characters. This setting is required.
- Password—For users with the Local authentication type, enter a password between 8 and 16 characters. This setting is required.
- Confirm Password—Re-enter the password. This setting is required.
- Roles —Select from the following options available for your authentication type:
  - RDA—For local users, designates the user as an RDA protocol user.
  - Secure connect— For local users, designates the user as a Secure Connect user.
  - CIFS—For local users, designates the user as a CIFS protocol user
  - Monitor—Limits the user to read-only access in the QoreStor GUI.
  - NDMP—For local users, designates the user as an NDMP protocol user
  - Object—For local users, designates the user as an object protocol user
- Full Name—Enter a name for the user.
- Email Address—Enter an email address for the user.
- Phone—Enter a phone number for the user.
- Description—Enter a description for the user.
Click Save.

Adding a user through the command line

To add a user through the command line, complete the following steps:

Access the QoreStor CLI. Refer to Accessing the CLI commands for more information.
Add a new user account with the command
```
user --add --name <user name>
```
To define roles for the new user, use the command
```
user --update --name <user name> [--add_roles <cifs|ost|rda|ndmp|iscsi|monitor|administrator|secure_connect|object>]
```
Refer to the QoreStor Command Line Reference Guide for more information.

Modifying a user

You can easily change the roles assigned to a local user through both the QoreStor GUI and the command line interface.

Modifying a local user through the GUI

NOTE: Modifying users through the QoreStor GUI applies only to users with the Local authentication type. It does not apply to SAML users. For more information, see Configuring SAML.

To modify user roles through the GUI, complete the following steps.

In the left navigation menu, click Users.
In the list of users, find the user you want to modify. In the Actions column, click the ellipsis icon , then click Edit. The Edit User pane is displayed.
Edit the user's Roles as required, select from the following options.

NOTE: You can select more than one role for a user.
- OST—Designates the user as an OST protocol user.
- RDA—Designates the user as an RDA protocol user.
- Secure connect - Designates the user as a Secure Connect user.
- Monitor—Limits the user to read-only access in the QoreStor GUI.
Click Save.

Modifying a user through the command line

NOTE: Modifying users through the command line applies only to users with the Local authentication type. It does not apply to SAML users.

To modify a user's roles through the command line, complete the following steps:

Access the QoreStor CLI. Refer to Accessing the CLI commands for more information.

Modify a user account with the command

user --update --name <user name> [--add_roles <cifs|ost|rda|ndmp|iscsi|monitor|administrator|secure_connect|object>] [--remove_roles <cifs|ost|rda|ndmp|iscsi|monitor|administrator|secure_connect|object>]