SENSTAR Symphony 7.2 Series, User Manual

Page: 23 / 128

Symphony Server
Add a user to a group
You can add a user to a group at any time to grant the permissions for that group to a user.
1.
In the server configuration interface, click Security > Users .
2. Select a user and click Edit .
3. In the Group Membership pane, select the group to which you want to add the user.
4. Click Save .
Supervisor impersonation
Supervisor impersonation allows two users with lesser permissions to log in simultaneously to
impersonate a single user with greater permissions.
Supervisor impersonation is the application of the two-person rule to add additional security to
the Symphony Client. You can use this feature to ensure that two people are present when a user
performs an operation in the client interface.
Configure a user for supervisor impersonation
To use supervisor impersonation, you must configure a user the two other users can impersonate.
1.
In the server configuration interface, click Security > Users .
2. Perform one of the following tasks:
• To create a new user for supervisor impersonation, click
Add .
• To use an existing user for supervisor impersonation, select the user and click Edit .
3. In the Properties section, select Enable Two Person Rule .
4. In each of the group lists, select the groups from which the users can impersonate the user.
5. Click Save .
Related tasks
Add a group on page 24
Add a user on page 22
Add a user to a group on page 23
Enable supervisor impersonation
To make the supervisor impersonation option available in the Symphony Client, you must add the
feature to the configuration file.
1.
Open the acc.ini file at %appdata%\Senstar7 .
2. In the
[Main]
section, add the following text:
ShowTwoManRule=True
3. Save and close the acc.ini file.
The Supervisor Logon option is visible on the login page for the Symphony Client.
Impersonate a supervisor
Two users can log in to the Symphony Client to impersonate a user and gain access to additional
functionality.
1.
In the client interface, click the user name and then click Log On/Switch User to open the
Logon window.
2. In the Server list, select the Symphony Server for which you have configured supervisor
impersonation.
Senstar Symphony User Guide 23