User's Manual

the application. An example of this would be a helpdesk scenario where many users may not require or
should not have access to features like, discovery, user permissions or, global application settings.
HP Web Jetadmin uses Windows domain identities to authenticate users and grant access to the application
or to specified features. HP Web Jetadmin provides single-sign-on which means the user is authenticated by
virtue of being logged into their client host. They do not have to provide their credentials again when logging
into HP Web Jetadmin.
The HP Web Jetadmin Administrator Role
The HP Web Jetadmin administrator has full rights to all application settings and features. The person
installing HP Web Jetadmin software must have local administrative privileges on the install-host and
therefore will have initial administrative access to the software. Any identity that is a member of the local
administrators group on the local host also has administrative access to the software. The identity must have
local administrative privileges on the install-host and therefore will have initial administrative access to the
software.
Alternate Log-in Method for User Security
HP Web Jetadmin uses the single sign-on functionality to pass the identity of the user who is currently logged
into Windows on the client to the server where HP Web Jetadmin is installed. HP Web Jetadmin authenticates
this identity through the local Windows users on the server or through the Windows domain identities. In
some cases, the client and server might not reside on the same Windows security domain or on any Windows
security domain. If HP Web Jetadmin fails to authenticate this identity for any reason, it displays an alternate
log-in prompt. Users can then enter log-in credentials other than the credentials for the current Windows
session on the client.
The alternate log-in prompt is useful in a variety of situations, such as the following:
●
An authorized HP Web Jetadmin user needs to access HP Web Jetadmin from the desktop of an
unauthorized user.
●
The HP Web Jetadmin server is on a security domain. The user has a log-in identity on the security
domain that has been given access rights in HP Web Jetadmin through the Users and Roles features.
However, the user's desktop is not on the security domain.
User Security Task Modules
●
User Security - Current Tasks and User Security - Common Tasks Task Modules
●
User Security - Roles Task Module
●
User Security - Users Task Module
●
User Security - Active Clients Task Module
The following sections describe the task modules you can display or hide on the User Security page in the
Application Management view. You can also display or hide these task modules in the corresponding
functional area in HP Web Jetadmin by right-clicking anywhere on the page and selecting the task module.
NOTE: To display the Task Module docking area, click View > Task Modules > Task Module docking area.
To display the Map docking area, click View > Device Modules > Map. The Map menu item is available when
you have selected a group; the group does not have to have to a map associated with it. The Map module is
visible if the Map menu item has been selected to show the module and if the selected group has a map
associated with it.
272 Chapter 5 Application Management ENWW