Haivision Makito, User Manual

Page: 138 / 294

Managing Users and Security
Managing Accounts
Makito User’s Guide, v2.1.0, Issue 01 138
Managing Accounts
NOTE
The
A
CCOUNTS
page is available to administrators only (i.e., users assigned
Administrator role). From here, administrators can create and manage user accounts for
the
Makito (including their own accounts).
The
M
Y
A
CCOUNT
page is available to users assigned either Operator or Guest roles to
change their own account passwords. For information, see “Changing Your Password” on
page 69.
From the
A
CCOUNTS
page, administrators can create, delete and modify user accounts for
the Makito.
An account can now be allocated to each user of the system so that the identity of the user
can be uniquely determined. The Makito provides three defined account roles to assign
privileges to users: Administrator, Operator and Guest. For details, see
“Role-based Autho-
rization” on page 62.
Using system-wide parameters, administrators can configure the allowable password
strength and composition (i.e., to force the selection of strong passwords), as well as the
periodic change of passwords. For details, see
“Managing Security Policies” on page 147.
The Makito can also be configured for WCI and CLI account sessions to log out after an
idle session timeout period. The session timeout period is selectable via a system-wide
parameter. For details, see
“Managing Security Policies” on page 147.
From the
A
CCOUNTS
page, administrators can also upload and manage personal Public Key
Infrastructure (PKI) keys for accounts to enable Public Key authentication (instead of using
a password). Note that in the current release, this only applies to SSH CLI access to the
encoder.
Managing User Accounts
TIP
It is recommended to set the Policies for your system first before creating users.
The Password Policies do not apply to administrators creating user accounts or setting
passwords for accounts other then their own.