User`s guide
114 Guardall Director V4.74 User's Guide 21-0381E v4.7.4
Enhanced Operator Password
Security
Operator password security has been
enhanced through allowed
characters, optional requirement to
change the password periodically,
and a configurable lockout feature
has been added.
Also See (Not to be Confused With): “The
Auto-Lockout Feature” in the “Welcome”
section of the Director online help or User’s
Guide.
This screen allows configuring various items
pertaining to password security.
Note: Requires “Operator Options” permission (for the
operator, and the workstation).
- Minimum length: The shortest length (number
of characters) allowed for an operator password;
- Lockout duration: Can be set to “Never”
(Disables the lockout feature), one hour, or
“Permanent” (operator will remain locked out
until their password is changed by an operator
with “Operator Edit” permission);
Note: The lockout feature blocks access to an
operator after 3 incorrect login attempts in a row (i.e.,
wrong password).
- Renewal time: How long before operators will
be prompted to change their password. (Never,
or every 30/60/90 days);
- Renewal expiry: How long before their present
password expires after the renewal time is
reached.
(Never, or after another 30/60/90 days);
Note: If an operator’s password expires, that operator
will be locked out until an operator with “Operator Edit”
permission logs in and changes the specific operator’s
password (same as permanent lockout).
- Enforce complexity: If selected (), operator
passwords: must include letters and numbers;
are upper/lower case sensitive; cannot
include 3 consecutive letters or numbers (e.g.,
abc or 123); cannot match the login name
(any upper/lower case); cannot match the
previous (present) password.
Operator Permissions
Muti-Account Systems
: Operator permissions are
associated with account folders--allowing different types
of permissions to be assigned to groups of accounts.
Accounts and account folders need to have been
set up appropriately. For details, refer to "Working
with Accounts and Folders" (near the beginning of the
Configuration section). Client/Server Systems
:
Permissions can also be assigned for each specific
client workstation. In this case, each operator will be
able to use only the features that are assigned to them
AND allowed for their workstation.
See
: "Client/Server Access and Permissions".
In the same way that user authorities
determine what users can do, "operator
permissions" determine the items and features
that groups of operators will be able to use.
For each specific item, click once to assign
view permission (magnifying glass), or click
again to assign view and edit permission
(pencil). If you click a 3rd time, this will clear
the selection.
Tip: Some suitable 'templates' (permission types) are
provided to give you a quick starting-point.
Permission to Use the Wizards
: To use the
configuration and communications Wizards (T
ools
menu), your operator permissions must grant
"Permission Type: All permissions" for the specific
account folder.
Related Topics
: "New Installation? Try the Wizard!"
Technical Note
: An operator cannot edit their own
permissions, or assign settings they don't have to
another operator. Items that are not available will either
be not displayed, or grey in colour.
[Management], Operator, Operator Settings,
Security