How to Configure User Authorization

The User Authorization window can only be accessed by Administrative users. To access this window with Router Services Manager's Authorization feature disabled, you must log on to Router Services Manager as a user with Administrative privileges on your system. For Solaris, this means logging on as root. For Windows systems, you must log on as a user with Administrative privileges. (Refer to the user documentation for your system to learn more about Administrative privileges)

When Authorization is enabled, you must be an Administrative user in the Router Services Manager database to open the User Authorization window.

Three authorization levels can be defined. The following restrictions apply to these access levels:

	CAUTION:	You should disable the Guest account when running Router Services Manager on a WindowsTM 2000 host system. Windows 2000 allows a user without an account on the machine to login using the Guest account. This is a potential security problem.

Administrator

No Restrictions - Administrator access is required to launch the User Authorization window and add remove or edit user profiles.

Read Write

Cannot launch the User Authorization window, and therefore cannot view or change user profiles. All other operations and functions are permitted.

Read Only

The following restrictions apply:

• Cannot perform a Save or Save As
• Cannot Enforce ACLs
• Can launch the Pre-Defined Well-Knowns window and change well-known IDs, but cannot permanently change/save well known IDs.
• Cannot change selections in the Startup and Enforce tabs in the Options window
• Cannot display passwords as clear text or change the Show Passwords as Clear Text setting in the Display tab in the Options window
• Can create a device, but cannot Save or Save As, so the devices are not persistent
• Can create Nicknames for devices, but a Read Only user cannot Save or Save As, so the Nicknames are not saved
• Cannot Save Active to Startup
• Cannot launch the User Authorization window
• Can launch template windows, but cannot change template settings
• Device Access credentials (Community Name, Telnet Login, and Enable Mode) are always hidden from Read Only users
• Can create a device, either through the Create Device window or by Importing a Device List, but the Use Syslog for ACL logging setting in the Options tab for these functions will not alter the current Syslog setting in the device. And, since Read Only users cannot Save or Save As, the device information cannot be saved.

Instructions on:

• Enabling Authorization
• Adding a User
• Removing a User
• Modifying User Attributes
• Disabling Authorization

Enabling Authorization

1. Launch Router Services Manager and log on as the user with Administrative privileges (root on UNIX systems) on the system (refer to your system documentation to learn more about administrative users).
   1. Enter your User ID, Domain Password and, on a Windows platform, select a domain from the Domain list in the Authentication window.
   2. Click OK. The Router Services Manager Main window opens.
2. Open the User Authorization window:
   1. If you've launched Router Services Manager as an Administrative user and User Authorization is currently disabled (as when newly installed), a message asks if you want to enable Authorization. Click Yes to open the User Authorization window,

      or

   2. Pull down the Tools menu and select User Authorization. The User Authorization window opens.
3. Add yourself as an Administrative user:
   1. Enter your User ID into the Username field.
   2. Select Administrator from the Access drop-down list.
   3. Click Apply. The user information is added to the Authorized Users table.

Adding a User

1. Pull down the Tools menu and select User Authorization. The User Authorization window opens.
2. Enter the username into the Username field. This user must be a valid user on the system where you are running Router Services Manager. The user name can be any character string.
3. Select an access level from the Access drop-down list.
4. Click Apply. The user information is added to the Authorized Users table.

Removing a User

1. Pull down the Tools menu and select User Authorization. The User Authorization window opens.
2. Select the user being removed from the Authorized User table.
3. Click Remove. The user is no longer permitted access to Router Services Manager.

Modifying User Attributes

1. Pull down the Tools menu and select User Authorization. The User Authorization window opens.
2. Select the user being modified from the Authorized User table.
3. Select an access level from the Access drop-down list.
4. Click Apply. The user information is changed in the Authorized Users table.

Disabling Authorization

1. Pull down the Tools menu and select User Authorization. The User Authorization window opens.
2. One-by-one, select all the users from the Users table, including the Administrative user and click Remove to remove every user from the table.
3. Click Apply. The Administrative user information is removed from the Users table and Authorization is now disabled. Now, all users that can log on to Router Services Manager will be granted Read Write access.

Related Information

• User Authorization Window
• Create Device Template Window
• Options Window
• Main Window

• How to Create a Device Template
• How to Create a Device
• How to Create a Device Group