Managing Users

Use this dialog to manage user accounts and user groups.

User Accounts

User accounts allow users to log in to the web interface of WhatsUp Gold and control access to data and functionality either through direct assignment of user rights or by membership in a user group.

User accounts can authenticate using:

Internal authentication. The user account is created using the Add User dialog, and will authenticate using an Internal password.
LDAP authentication. The user account is created using the Add User dialog, however its authentication type is set to LDAP. The user will log in using the credentials they use to authenticate with their LDAP server. The credentials for their LDAP server must be configured in WhatsUp Gold using the LDAP credentials dialog. For more information see LDAP credentials.
Active Directory authentication. The user account is created when a user that belongs to an AD group that has been mapped to a WhatsUp Gold group initially authenticates with WhatsUp Gold. The user will log in to WhatsUp Gold using their Windows domain credentials which must be configured using the LDAP credentials dialog. For more information see LDAP credentials.

User accounts gain user rights when:

Directly assigned those rights using the Add/Edit user accounts dialog. User rights directly assigned to the user account supersede any rights prohibited by membership in a WhatsUp Gold user group.
The user is a member of a WhatsUp Gold user group. The user will gain those rights assigned to the WhatsUp Gold user group.
The user is a member of a AD group that has been mapped to a WhatsUp Gold user group. The user will gain those rights assigned to the WhatsUp Gold user group.

There are two default user accounts:

admin account. The admin account is given all user rights, including Manage Users, which grants the the right to create and edit user accounts. The Administrator is also given all group access rights, so that when enabled, this account will be able to view and edit devices in all device groups.
guest. The Guest account allows users to see the application without giving them the ability to modify any settings. By default, all user rights and all group access rights are disabled for this account. This limits the account to only seeing a limited number of things in the application. The admin account (or anyone else with Manage User rights) can modify the Guest account rights using the Manage Users dialog.

The admin account can be used to create additional user accounts as needed.

Note: We recommend limiting the number of users to whom you grant the Manage Users right. If multiple user accounts are given permission to create and delete user accounts, confusion could surface as a result. Open communication between all user accounts with the Manage Users right is crucial to a smooth network management operation.

To manage users:

To add a new user account, click New. The Add User dialog appears.

17123 WUG15.0.1 - Known Issue - Web Interface User Rights - To update the displayed user rights of a user account that has the Manage Users right following upgrade to WhatsUp Gold v15.0 or later, select a user account from the account list, then click Edit. The Edit User dialog appears. Without making any changes to the user rights, click OK. The user rights available to the user prior to the upgrade will be updated. Log out of WhatsUp Gold and log back in. The user account will correctly display the user rights assigned to the user account and the Admin Panel in the Admin tab (Admin > Admin Panel) and other areas of the user interface previously hidden will display.

Important: When upgrading from WhatsUp Gold v14.x or earlier to WhatsUp Gold v15.0 or later, if the Manage Users rights was assigned to an account prior to the upgrade, the displayed user rights may reflect rights that have not been assigned to the user account, causing portions of the web interface to be hidden such as the Admin Panel in the Admin tab. To update the user account to reflect that the rights are assigned to the account, it is necessary to open the edit dialog for the user account, and without making any changes, click OK. This will update the user rights assigned to the account, and after logging out and back into the WhatsUp Gold web interface, the user rights assigned to the user will be correctly displayed.

To change an existing user account, select a user account from the user account list, then click Edit. The Edit User dialog appears.
To remove a user account, select the user account from the user account list, then click Delete. A confirmation message will appear. Click Yes. The user account will be removed from the user account list.

User Groups

User groups efficiently manage assignment of permissions and rights to user accounts. You can map WhatsUp Gold user groups to Active Directory groups so that users can authenticate and be assigned to WhatsUp Gold groups using their Windows domain credentials.

domain-guests. The domain-guests group is created if you attempt to map AD groups before any WhatsUp Gold user groups have been created, this group is not given any user rights. Any user account with Manage Users can add user group rights to this group.

To manage groups:

To add a new user group, click New. The Add User Group dialog appears.
To change an existing user group, select a user group from the user group list, then click Edit. The Edit User dialog appears.
To remove a user group, select the user group from the user group list, then click Delete. A confirmation message will appear. Click Yes. The user account will be removed from the user account list.

To enforce access rights set up in the Device Group Properties dialog:

Click Enable Group Access Rights to enforce access rights set up in the Device Group Properties dialog.