4.3. Presentation of the web interface accounts and their management

The web interface enables access to:

Creating analysis templates
Analysing files
Accessing and managing analysis reports
Managing users and related groups
History of authentications, account creations/deletions, and rights changes on the platform

4.3.1. Web interface accounts, groups, and rights

It is possible to create user accounts each having different rights.
These rights are defined by groups.
Each user can therefore belong to one or more groups, thus inheriting the rights of the group.

In the web interface, there are two types of group with differing rights:

Operators
Administrators

Generic accounts are defined with the following rights levels:

Account...	Type of rights or group	Intended for a...
`operator`	Operators	analyst
`administrator`	Administrators	administrator
`admin`	Operators and Administrators	access to all the functions of the analyst and administrator

4.3.2. Authorised functions for members of the Operators group

Members of the Operators group have access to the detection functions and the corresponding reports.

On the other hand, menus dedicated to equipment administration will not be accessible.

4.3.3. Authorised functions for members of the Administrators group

Members of the Administrators group have access to the equipment administration functions.

On the other hand, menus dedicated to equipment operations will not be accessible.

4.3.4. Functions allowed in the admin account

From the admin account, it is possible to access all the available functions.

4.3.5. Summary tables of the rights per group

4.3.5.1. Access to icons

Icon	Description	Members of the Operators group	Members of the Administrators group
theme change button	Changing the current theme See the Title bar	access	access
API	Gatewatcher API interface See the Access to the Gatewatcher API	limited access	access
current account button	Current account management See the Current account management, member of the Operators Group	access, see the Current account management, member of the Operators Group	access, see the Current account management, member of the Administrators Group

4.3.5.2. Access to the General Menu commands

Menu	Description	Operator	Administrator
logo GATEWATCHER	`home` page, general view of the GCenter, See `Home` screen of the Web UI	access	no access
Home		access	no access
`New analysis`	`New analysis` page See `New analysis` screen of the Web UI	access	no access
`Reports`	`Reports` page See `Reports` screen of the Web UI	access	no access
`Templates`	`Templates` page See `Admin/Templates` screen of the Web UI	access	no access
`Analysers`	`Analysers` page See `Analysers` screen of the Web UI	access	no access
Admin	Administration functions menu, see table below	no access	access

4.3.5.3. Access to the Admin Menu commands

Sub Menu	Description	Operator	Administrator
GUM Config command	Enables configuring the automatic scheduling of updates See `Admin- GUM - Config` screen of the legacy Web UI	no access	access
GUM Updates command	Enables applying an update to the GBox detection engines See `Admin- GUM - Updates` screen of the legacy Web UI	no access	access
GUM Hotfix command	Enables applying an hotfix See `Admin- GUM - Hotfix` screen of the legacy Web UI	no access	access
GUM Upgrade command	Enables applying an upgrade See `Admin- GUM - Upgrade` screen of the legacy Web UI	no access	access
GBox Diagnostics command	Enables log files to be exported and downloaded See `Admin-GBox - Diagnostics` screen of the Web UI	no access	access
GBox Accounts command	Enables managing accounts See `Admin-GBox - Accounts` screen of the Web UI	no access	access
GBox Users management command	Enables Users management See `Admin-GBox- Users management` screen of the Web UI	no access	access
GBox Configuration command	Enables the GBox configuration See `Admin-GBOX- Configuration` screen of the Web UI	no access	access

4.3.6. Related principles

4.3.6.1. Authentication mode

A user's authentication is achieved by means of a login/password pair.

4.3.6.2. Password management

The current account manages its own password but may also manage other accounts depending on the rights granted by its group.

Details are provided in the table below:

User	can change the password
User	Operators group	Administrators group	admin
operator account	only its own account	No	No
group member Administrators	X	X	X
admin account type	X	X	X

4.3.6.2.1. Changing one's own password

The graphical interface is described in Title bar.
For an Operators group password, see the procedure in Changing the current account password.
For an Administrators group password, see the procedure in Changing the current account password .

4.3.6.2.2. Administrator management of passwords for other accounts

The graphical interface is described in `Admin-GBox - Accounts` screen of the Web UI.

For implementation, see the Resetting a user's password procedure.

4.3.6.3. Password management policy

The passwords entered must comply with the password management policy.

The policy is divided into two categories:

General settings
Specific password settings

These general parameters are:

period of validity
Recording of previous password hashes

These specific parameters are the criteria that passwords must contain, such as lower case, upper case, and so on.

Setting	Default value
At least one upper case letter	enabled
At least one digit (0 to 9)	enabled
Minimum password length	8 characters
At least one lower case letter	enabled
At least one symbol (i.e. neither a number nor a letter)	enabled

4.3.7. Creating local users

In addition to generic accounts, it is possible to create user accounts each having different rights.
The graphical interface enabling the creation of users is done in the `Admin-GBox- Users management` screen of the Web UI.
For implementation, see:

The Creating local users
The Changing some of a local user's information
The Deleting a user

4.3.8. Audit trail principle

The system records the various actions carried out in the web interface over time, in order to ensure traceability.

This traceability is carried out for:

Users' connection or disconnection
Creating and deleting accounts
Changing the permissions of an account

4.3.8.1. Authentication history function

The history of all authentications on the Gbox is available.
To view the graphical interface presentation, refer to The `Authentications history` section of the `Accounts` submenu.
For instructions, see Viewing the authentication history.

4.3.8.2. Historical function of all creations or deletions

The history of all GBox user creations and deletions is available.
To view the graphical interface presentation, refer to The `Creations/Deletions history` section of the `Accounts` submenu.
For instructions, see Viewing the history of user creations or deletions.

4.3.8.3. History function for all changes in user rights

The history of all user permissions on the GBox is available.
To view the graphical interface presentation, see The `Permissions history` section of the `Accounts` submenu.
For instructions, see Viewing the history function for all changes in user rights.