HP Web Jetadmin - Security and HP Web Jetadmin

4
Figure 2—Assign user role
User/role assignment can be viewed and managed
in Application Management > User Security >
Roles > Users (see Figure 2).
• Assign Role launches the Assign User Role
wizard that initially provides controls to select
one or more users or groups.
• User name specifies the local or domain user
account or group name.
• Domain specifies the Windows domain (or the
HP Web Jetadmin host name in the case of local
users or groups).
• Browse is used to find users or groups on either
the HP Web Jetadmin host or on the Windows
domain.
After clicking Next, one role can be selected for assignment. Group selection is possible when the
role has a Group, which is discussed in “Device group restriction type” on page 5. After confirming
settings, the Results screen displays, showing the new user/role assignments. Once these assignments
are complete, users can access HP Web Jetadmin by browsing to the server without being prompted
for a username or password.
Users and user groups can be selected when making user/role assignments. The following table
shows how both user and user groups can be referenced when making user/role assignments.
Type Domain User/user group
Domain User Domain name User name
Domain Group Domain name Domain group name
Local User Computer name Local user name
Local Group Computer name Local group name
In most cases the domain user, domain user group, or local user group is used in user/role
assignment. A common scenario is to have helpdesk employees as members of a domain group
managed by the IT team. New helpdesk employees are automatically granted permissions to the
HelpDesk role in HP Web Jetadmin by virtue of domain group membership (which is managed at the
Windows domain). Or, an HP Web Jetadmin administrator may have many partners who also use
HP Web Jetadmin. These users can be tracked locally on a group within the HP Web Jetadmin install
host. (For more information about local or domain user accounts and domain or local groups, see
Microsoft security documents.)
Existing user/role assignments can be edited to change or delete the user/user group or the HP Web
Jetadmin role. Existing assignments are found in Application Management > User Security > Users.
NOTE At this time, HP Web Jetadmin does not support groups within groups. For example, assume
User A is a member of Group A and Group A is a member of Group B. If Group B is
assigned to a role, User A does not have access to that role.