4.3. Web interface accounts and their management

GCenter enables access to:

  • Managing users and related groups

  • History of the changes on the platform (see this in the history part)

  • Linking with an LDAP server

4.3.1. Web Interface Accounts

4.3.1.1. List of groups

In the GCenter web interface, two different account types are defined by group membership:

  • operator

  • administrator

From the user account configuration menu, it is possible to create user accounts and belong to one or more groups and thus inherit the rights of each group.

Note

The proposed groups fully comply with the Military Programming Act.

Note

It is necessary to change the password from the first login and keep it in a safe place, for example, with the encryption keys of the appliances.

4.3.1.2. Generic accounts

Generic accounts have been defined with rights levels listed in the table below:

Generic Account Name

intended for a...

Group member

admin

access to all the functionalities of the analyst and administrator

operator and administrator

4.3.2. Functions allowed with the group or role `operator`

The Operator account can access all menus presents in "Detection strategy" and "health".

4.3.3. Functions authorized with the group or role `administrator`

The administrator account can access all menus presents in `administration` and `health`.

4.3.4. Functions allowed in the admin account

From the admin account, it is possible to access all the features present in the navigation bars and menus of the Web UI.

4.3.5. Summary tables of the menus per level

4.3.7. Creating local users

In addition to generic accounts, it is possible to create user accounts each having different rights.

Note

The proposed groups fully comply with the Military Programming Law.

When creating a new user account, it is possible to assign different roles to the user.
The role(s) the user is assigned will enable them to access more or less menus in the web interface.
Indeed, depending on the actions carried out, it will be necessary to assign a specific role.
The administrator fills in the following fields concerning the user they wish to create:

  • Username

  • Password

  • Email address

  • First Name

  • Last Name

It is also necessary to activate the account for it to be usable and to assign it the available roles: operator and/or administrator
These fields will be used later to trace the user in the connection history or in the event of changes concerning this same account.
The graphical interface enabling the creation of users is done in the `Users management` screen.
For implementation, see:

4.3.8. LDAP integration / Active Directory

Authentication of the GCenter's user accounts can be managed by the GCenter as well as by a Lightweight Directory Access Protocol (LDAP) server.
Configuring the connection between the GCenter and the LDAP server is also done by the GCenter.
The main functions include:

  • Displaying the connection status

  • Enabling the connection to a remote authentication server

  • Managing connection information to a remote authentication server

  • Mapping of users and groups between the GCenter and the remote authentication server

  • Advanced configuration of the connection to a remote authentication server

The graphical interface enabling the creation of users is done in the `LDAP binding` screen.
For implementation, see:

4.3.9. Audit trail

The system records the various actions carried out in the web interface over time, in order to ensure traceability.
This traceability is carried out for:

  • Users' connection or disconnection

  • Creating and deleting accounts

  • Changing the permissions of an account

4.3.9.1. Authentication history function

The history of all authentications on the GCenter is available.
To view the graphical interface presentation, see the `History` screen.
For the implementation, refer to Viewing the authentication history.

4.3.9.2. Historical function of all creations or deletions

The history of all creations or deletions of GCenter users is available.
To view the graphical interface presentation, see the `History` screen.

4.3.9.3. History function for all changes in user rights

The history of all user permissions on the GCenter is available.
To view the graphical interface presentation, see the `History` screen.