Troubleshooting guide

2 — 5620 SAM user security tasks
2-4 Alcatel-Lucent 5620 Service Aware Manager
5620 SAM
System Administrator Guide
• The assigned user privileges determine the following for a GUI user:
• the available 5620 SAM menu options
• the parameters on object property forms that are configurable
• By default, a user group is assigned access to all 5620 SAM objects.
• A user acquires span of control access rights from the associated user group.
• When you modify a user group, and a user in the group has an open client session,
client actions may fail for the user. To put the new user group permissions into
effect, the user must close the current client session and open a new session.
• You can modify but not delete a span of control profile that is assigned to a group.
Password management
A 5620 SAM user password must observe the following constraints:
• It must be 8 to 100 characters.
• It must contain at least three of the following character types:
• lowercase
• uppercase
• special
• numeric
• It cannot be the user account name, in forward or reverse order.
• It cannot include more than three consecutive instances of the same character.
• It must change according to a configurable schedule, to prevent account lockout.
• It cannot be reused as a new password for the same user account.
2.3 User activity logging
The 5620 SAM logs each GUI and OSS user action, such as a system access attempt
or the configuration of an object, in the 5620 SAM database. Table 2-1 lists the
information in a user activity log record:
Table 2-1 User activity log record information
Field name Description
Time Time of activity
Session Type Type of session, which is GUI, JMS, or OSS
Session ID Client session identifier
Session IP Address Client IP address
Session Time Client session start time
Server IP Address IP address of 5620 SAM main server that reports the activity
Type General activity type, which is Deployment, Operation, or Save
Sub Type Specific activity type, which is Creation, Deletion, Modification, or name of
the invoked method
Username 5620 SAM username
(1 of 2)
Release 12.0 R6 | November 2014 | 3HE 08861 AAAF TQZZA Edition 01