ExtraHop Trace Admin UI, Руководство пользователя

Страница: 26 / 58

ExtraHop 8.8 ExtraHop Trace Admin UI Guide 26
Next steps
• Add an account for a remote user
User groups
User groups enable you to manage access to shared content by group instead of by individual user.
Dashboards and activity maps can be shared with a user group, and any user who is added to the group
automatically has access. You can create a local user group—which can include remote and local users.
Alternatively, if your ExtraHop system is configured for remote authentication through LDAP, you can
configure settings to import your LDAP user groups.
•
Click Create User Group to create a local group. The user group appears in the list. Then, select the
checkbox next to the user group name and select users from the Filter users... drop-down list. Click
Add Users to Group .
• (LDAP only) Click Refresh All User Groups or select multiple LDAP user groups and click Refresh Users
in Groups .
• Click Reset User Group to remove all shared content from a selected user group. If the group no longer
exists on the remote LDAP server, the group is removed from the user group list.
• Click Enable User Group or Disable User Group to control whether any group member can access
shared content for the selected user group.
• Click Delete User Group to remove the selected user group from the system.
• View the following properties for listed user groups:
Group Name
Displays the name of the group. To view the members in the group, click the group name.
Type
Displays Local or Remote as the type of user group.
Members
Displays the number of users in the group.
Shared Content
Displays the number of user-created dashboards and activity maps that are shared with the
group.
Status
Displays whether the group is enabled or disabled on the system. When the status is
Disabled
,
the user group is considered empty when performing membership checks; however, the user
group can still be specified when sharing content.
Members Refreshed (LDAP only)
Displays the amount of time elapsed since the group membership was refreshed. User groups
are refreshed under the following conditions:
•
Once per hour, by default. The refresh interval setting can be modified on the Remote
Authentication > LDAP Settings page.
• An administrator refreshes a group by clicking Refresh All User Groups or Refresh Users in
Group , or programmatically through the REST API. You can refresh a group from the User
Group page or from within the Member List page.
• A remote user logs in to the ExtraHop system for the first time.
• A user attempts to load a shared dashboard that they do not have access to.
User privileges
Administrators determine the level of access and functionality users have with the ExtraHop system. In
addition to setting the privilege level for local users, you can enable options for any user privilege level.
For information about user privileges for the REST API, see the
REST API Guide .
For information about remote user privileges, see the configuration guides for LDAP , RADIUS , SAML , and
.