User`s guide

Configure User Access Control
Chapter 8 Users, Security, and Authentication 143
A strategy for assigning rights to a port can include:
• Allowing <<Everyone>> access to a port and then restricting access to
certain users -or-
• Specifying each individual user and their specific rights to a port
• Adding a user to an established group (Access list) with preconfigured
rights to a port.
Selecting <<Everyone>>, means that all users, whether they are
configured locally or are using a remote authentication (such as LDAP or
Kerberos), have access to this port.
If <<Everyone>> is not selected, no users are allowed to access this port
unless they are individually listed.
Usernames for access permissions or restrictions must be entered exactly
as listed locally or on the remote authentication server, and are
case-sensitive.
In the next example, three users are configured on the Digi Passport unit:
jeff, ronk, and tim. To give users tim and ronk read/write access and
power access to this port, either:
• Grant rights to ronk and tim.
• Restrict rights for user jeff.
• Add users to an access list, in this example, sun-users. To create
access lists, go to System administration > Access list. For more
information, see "Add an Access List and Add Users to It" on page 40.