NOTE: When a user is removed from all groups, that user's privileges revert to those of the default user group. For
this reason, it is recommended custom groups be used and the default user group is not granted additional
privileges.
Radius, and LDAP authentication services allow group configuration. If a remote user is configured as a member
of a remote group, the authentication server provides the group name to the console server when it authenticates the user. A
local group by the same name must also be configured on the console server. If an authentication server authenticates a
remote user but does not return a group, then the remote user is, by default, assigned to the user group.
admin group
Members of the admin group have full administrative privileges that cannot be changed. They have the same access and
configuration authorizations as the default admin user. Administrators can configure ports, add users and manage power
devices connected to the console server.
To view admin appliance access rights:
1.
Click
Users - Authorization - Groups
. The Group Names screen is displayed, showing the three default user
groups along with any groups that have been created.
2.
Click on
admin
under the Group Name heading. The content area will display the Members screen listing all
members belonging to the admin group (default members are admin and root users).
NOTE: When any Group Name is selected, both the content area and side navigation bar change. The side navigation
bar will display specific menu options for Members and Access Rights (which include Serial, Power and Appliance
rights).
3.
In the side navigation bar, click
Access Rights - Serial
or
Access Rights - Power
to access the screens
displaying the fixed access rights and permissions for members of the admin group pertaining to serial ports
and power management.
NOTE: The Serial and Power screens are read-only and cannot be changed.
4. In the side navigation bar, click on
Access Rights - Appliance
. The Appliance Access Rights screen appears
and lists all access rights available to a member belonging to the admin group. All appliance access rights are
shown enabled (checked). Available appliance access rights are:
•
View Appliance Information
•
Disconnect Sessions
•
Reboot Appliance
•
Appliance Flash Upgrade and Reboot Appliance
•
Configure Appliance Settings
•
Configure User Accounts
•
Backup/Restore Configuration
•
Shell Access
•
Transfer Files
NOTE: The Appliance Access Rights screen for the admin and appliance-admin user groups is read-only and cannot
be changed. Unchecking any box and clicking
Save
will result in an error message. The console server will maintain
all rights selected.
Vertiv™ | Avocent® ACS800/8000 Advanced Console Server Installer/User Guide
54
