Eicon Networks SHIVA 1100, Administrator'S Manual, Page: 105 / 136

User list
System Administrator’s Guide 105
2. Specify a Username and click Add .
3. Configure the following settings.
• Administration: A user with the administration access control is permitted to
edit any configuration file on the Shiva VPN Gateway. It should be given to
trusted users who are permitted to configure and reconfigure the unit.
• Diagnostic: The diagnostic access control allows a user to view status
reports, the technical support report, the system log and other read only
pages. No capability is granted to allow such a user to edit any of the
configuration on the Shiva VPN Gateway. This access control can be
granted to technical support users so they can attempt to diagnose but not fix
any problems which occur.
• Encrypted save/restore all: A user with this access control can dump and
restore the entire Shiva VPN Gateway's configuration via the encrypted save
and restore option on the Advanced page. Such a user cannot edit the
configuration nor even see the configuration files themselves. This access
control can be allocated to a technician whom you want to be able to restore
units to a known good configuration but to whom you do not wish to grant full
administration rights.
• Internet access (via access controls): A user with this access control is
permitted controlled access to the web through the Shiva VPN Gateway's
web proxy. See “Access control” on page 62 for details on controlling LAN
users' web access.
• User settings: A user with this access control can edit users' login
information, create new users and modify access controls for other users.
Without this access control, users can only change their own passwords.
Because this access control allows a user to edit their own permissions, it is
best left such that only the root user has it.