User guide

Managing zone access rights
When operating a DSView software system with zones, there are multiple layers of access
rights to consider.
First, you can allow or deny access rights per zone. If you deny an access right group for a
zone, no users in that zone, including administrative users, can perform the associated actions.
In addition, a user cannot create a sublevel zone with access rights that were denied in the
parent zone. If you allow an access right group for a zone, specified users in this zone and
sublevel zones can perform the associated actions.
The next layers of access rights are user groups and users. Within a zone, you can assign
specific access rights to user groups. For example, for a zone with Firmware Management
allowed, you could choose to only allow the administrative user group to manage firmware,
and prevent other user groups from managing firmware by restricting the group access rights. To
further control user access rights, you can also assign access rights to individual users.
An administrative user in the top level zone is considered a super user and can manage access
rights for any user in any zone. Administrative users in sublevel zones with appropriate access
rights can manage user access rights for their zone and other zones for which they have access.
When enabled for a zone, these access right groups permit qualified users to perform the
following actions:
• Zone Management - Create zones and modify zone properties from the System - Zones
window. Users with access rights can also switch to other zones.
• User and User Groups Management - Add or delete users and user groups, and perform
other user and user group management operations from the Users tab.
• Unit and Unit Groups Management - Add or delete units and unit groups, and perform
other unit and unit group management operations from the Units tab.
• File Management - Add or delete appliance files from the System - Appliance Files
window.
• Tasks Management - View, schedule and run tasks from the System - Tasks window.
• Firmware Management - Upgrade appliance firmware.
• System Management - View and modify some system settings.
• Log Viewing - View event logs, data logs and reports under the Reports tab.
To allow or deny access rights for a zone:
1. Click the System tab, then click Global Properties.
2. Select Zones in the top navigation menu.
Chapter 16: DS Zones 253