4.3. Web interface accounts and their management
GCenter enables access to:
Managing users and related groups
History of authentications, account creations/deletions, and rights changes on the platform
Linking with an LDAP server
4.3.1. Web Interface Accounts
Note
The proposed groups fully comply with the Military Programming Law.
In the GCenter web interface, there are two different types of rights:
Operator
Administrator
Generic accounts are defined with the following rights levels:
Account... |
type of rights or group |
intended for a... |
|---|---|---|
|
operator |
analyst |
|
administrator |
administrator |
|
operator and administrator |
access to all analyst and administrator functions |
Note
It is necessary to modify the password upon the first connection, and to keep it in a safe place, for example, with the encryption keys of the devices.
4.3.2. Functions allowed with the group or role `operator`
4.3.4. Functions allowed in the admin account
4.3.7. Creating local users
In addition to generic accounts, it is possible to create user accounts each having different rights.
Note
The proposed groups fully comply with the Military Programming Law.
Username
Password
Email address
First Name
Last Name
4.3.8. LDAP integration / Active Directory
Displaying the connection status
Enabling the connection to a remote authentication server
Managing connection information to a remote authentication server
Mapping of users and groups between the GCenter and the remote authentication server
Advanced configuration of the connection to a remote authentication server
4.3.9. Audit trail
Users' connection or disconnection
Creating and deleting accounts
Changing the permissions of an account